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MARK FORMING APPARATUS, METHOD Besides the above-described method, there has been pio- 

OF FORMLNG LASER .MARK ON OPTICAL posed a more sophisticated master disk level method which 

DISK, REPRODUCING APPARATUS, involves forming a mo-e complicated physical mark. On the 

OPTICAL DISK AND METHOD OF other hand, a replica method is known diat makes a replica 

PRODUCING OPTICAL DISK 5 having exactly the same physical features by melting the 

resin of a legitimate disk no matter how complicated the 

BACKGROUND OF THE INVENTION physical mark is made at the master disk level. This method 

1 . Field of the Invention requires much time and cost to produce one master disk, but 

Tt,^ 1 . . • f . hundreds of thousands of disks can be produced from 

The present mvention relates to a marking forming *u . • * ^ i • i -w^- 

=.r.r>ar.r.rc ^ ^ *u A r.f f 1 I * I OHC piTatcd mastcr disk, thc cost pct piiatcd disfc 1$ low. This 

apparatus, a method of forming a laser marking to an optical ^ -u- *u Jl * .u 

Ai.i- ^ .* I J- 1 I *u J therefore given nse to the problem that as the repLca 

disk, a reproduction apparatus, an opucai disk, and a method ,^^tt^^ i^^^JZ. , . a j • r . j r ». 

of manufacturing an optical disk, which may be utilized, for "ffSet«Tf ^'''"P^"'' ^T"' ' ' 

example, to prevent duplication of optical disks. SS^Tevd ^ " 

2. Description of the Prior Art 15 ac A^^r^i^A u *u • * ■ . l 

^ »5 As descnbed above, the pior art piracy prevention tech- 

With increasing use of ROM-type optical disks in recent niques have several problems to be overcome, 

years, pirated disks have also been spreading, infringing the ti,»co ^^ki««.. • ^ ._ . 

rights of copyright owners. These problems are suniraanzed below. 

This is because ROM disk manufacturing apparatus have „,v!^™ ^J'^"'^^"^^^'', °f the master disk level 

Ko«« ^^A^ « ^1 1 t.1 A I I. \ . f(\ P"^3cy prevention techniques of the prior art is low since it 

been made readily avadable and also have become easy to » ^^^^^ ^^^^.^^^^ ^^^^.^^ P^^^ 

TpLte can make a CD master disk just by extracting „,!^.TZ n ^^"^ fnethod that forms a physical 

logic data from software contained on a CD. copying it onto "'l" "ased on physical mark design data, .f a manufartunng 

I- a magnetic tape, and setting the tape on a mastering appa- fS"i° a ''^^/^f 1^ Tu^'^t'^'f 

h nitus. Hundreds of thousands of pirated disks can be preyed « "S'.?^'" manufacturer .s obtained. Ulegal disks can be 

f • . ... V,. . easily manufactured, 
from this single master disk Since purates do not. pay 

H royalties, they make a profit by selling pirated disks at a low Problem 3: Since the security level provided by the prior 

H= price. This necessarily means a financial loss to the copy- ^ P^^^^ prevention methods is fixed, its efifeciiveness 

\| right owner. decreases against constantly improving pirating techniques. 

)Q According to the current CD specification, only the func- Problem 4: If a disk format without copy protection were 

m tion of reading logic data from a CD is provided, but no allowed to exist along with a disk format with copy 

functions are provided to detect physical features of a disk. protccuon, pirated disks could be made with the disk formal 

Ul As a result, a pirated CD can be easily produced by without copy protection. It has therefore been necessary to 

a bit-copying the logic data. ' produce all disks with copy protertion. The use of copy 

H The prior art discloses a method of preventing piracy by as°^2ic disks^"''^^'^ ^"^^^"^ specifications such 

s==l adding a hinction to recognize disk physical features. ^ * 

=^ This method involves estabUshing a new specification ^^^^"'^ f.' A^^o^<^ng P^or ait methods, a limited 

H that defines the inclusion of a physical mark on a master disk of.hcensmg companies possess the special manu- 

N toprevcntthepiratingofdisksmadetothisspccification.As 40 ^ '^^f'^' . ''''' 'P^^'""' 

O an example of the prior art. a piracy prevention method is ?^^^*^f«^^- ^^^t^^'^e "^^s cannot make disks except at the 

known such as the one disclosed in Japanese Patent Unex- "^cnsmg con^ames. 

amined Publication No. 5-325193. According to that Problem 6: In the master-disk marking method. aU disks 

method, in the cutting process the recording beam is delib- Pressed from the same master disk have the same disk ID. 

erately swept in the tracking direction, when recording a 45 ™^ "^^^"^ run by using the same 

designated region, to form a wobbling on the master disk. password. As a result, password security cannot be main- 

When the disk is played back on a reproduction apparatus "!^^^^:^ ^ ^^PPy ^^^k or a communication line is used 

equipped with a wobbling detection circuit, the disk is combination. Furthermore, the password has to be entered 

checked to sec whether the wobbling is formed in the each time the disk is used since secondary recording is , not 

designated region. If it is detected that the wobbling of a 50 P^^^**'^^. 

designated wobbling frequency is formed in the designated SUMMARY OF THE INVENTION 
region, the disk is judged to be a legitimate disk; otherwise. 

the disk is judged to be a pirated disk. ^ view of the above-outlined problems of the prior art. it 

More specifically, based on predefined physical mark \^ ^^^^^^ present invention to achieve a greatly 

design data, a physical mark is formed on the masker disk 55 ""^P^o^ed cq)y prevention capability as compared to the 

by using a special mastering apparatus equipped with a P"^^ 

wobbling function. This prevents pirates from making ^^r^ specifically, the present invention provides the 

pirated disks since they do not have such special mastering following means to overcome the above-outlined six prob- 

apparatus nor physical mark design data. Such an anti-piracy ^^ms of the prior art piracy prevention methods, 

mark needs to be formed on every disk made to this 60 To overcome Problem 1. a piracy prevention method 

specification. However, since it is possible to extract this involving the use of a physical mark at a reflective film level, 

physical mark by examining a legitimate disk, the prior art rather than the master disk level physical mark as used in the 

method has had the problem that pirated disks may be made prior art. is provided wherein the physical mark is formed on 

if such a special mastering apparatus falls into the hands of a reflective film of a disk. This prevents the production of 

an illegal person. In this patent specification, piracy preven- 65 pirated disks if duplication is made at the master disk level, 

tion methods of the type that fonns a physical mark on the To overcome Problem 2. a new ROM-recording means is 

master disk will be referred to as master disk level methods. used that performs secondary recording to a two-disk lami- 
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nated ROM disk by using a laser. In a first step, physical disk; laminatiDg two disks together, said disks including at 

marks are randomly formed, and in a second step, the least one disk with said reflective film formed thereon; and 

physical marks are measured with a measuring accuracy as forming at least one marking by a laser on said reflective 

high as 0.13 pm. In a third step, their position infOTnaUon layer of the laminated disks. 

is encrypted and, using the secondary recording means, a 5 The invention also provides a reproduction apparatus 

barcode is recorded to the ROM disk with an accuracy of comprising: position information reading means for reading 

several tens of microns which is the usual processing position information of at least one marking or information 

accuracy. Optical mark position infOTmation can thus be cooceming said position information, said marking being 

obtained with an accuracy of, for example. 0. 1 fun much formed to at least one reflective film formed to a disk and 

higher than the processing accuracy of a conventional appa- lo detected for a position thereof, at least the position 

ratus. Since optical marks cannot be formed with the accu- detected being output as said position information of 

racy of 0.1 pm by using commercially available equipment, ^.^^ marking; marking reading means for reading informa- 

production of pirated disks can be prevented. concerning at least one actual position of said marking; 

To overcome Problem 3. both a first-gcneration cipher co"iparing/judging means for performing comparison and 

with a low degree of security and a second-generation cipher 15 i^^g^nicnt by usmg a result of reading by said position 

with a high degree of security, each enciphering the position ^"^^ff**'^'" ^^cadmg means and a result of reading by said 

information with a digital signature, are prerecorded on a reading means; and reproducing means for repro- 

medium and by using such a medium, piracy is prevented 'I'^'J^'* ^" ^P^^^' ^" accordance with 

with the security corresponding to the applicable generation ^ '^'"^^ tfie companson and judgement performed by said 

if the design of reproduction apparatus changes from one M ^omparing/judgiag means. 

generation to the next ^"^ invention also provides a method of manufacturing 

To overcome Problem 4, an anti-piracv function identifier huw w comprising the steps of : forming at least one 

for indicating whether or not the software product is J^^-f;^™"^^^^ 

equipped with a copyright anti-piracy function is recorded on no^tL'^^^ 

on the master disk. To prevent the identifier from being ^5 Z JT v '"^ """'^"^.^"^ said detected 

altered, compressed information of software contents: and , T ^"J^^T^^^" . '^'^ 

the anti-piracy function identifier are scrambled and ^"fl^P^'"^ ^^J^ m tormation for wnung to said disk, 

encrypted together when recording the software contents on ^^^^ provides a method of manufacturing 

the master disk. Since the identifier cannot be altered, pirates ^" compnsing the steps of : forming at least one 

cannot produce disks with a disk format without anti-piracy ^0 ^^^k- forming a reflective film to said formed disk; applying 

measures. This prevents the production of pirated disks. ^"^^ marking lo said reflective film: detecting at least 

To overcome Problem 5, as a secret kev for digital ^"^.P^^"*^" of said marking; and outpuaing said detected 

signature encryption indispensable for the manufacture of ? H^ftl,^' ? information ot said marking and apply- 

disks, a subkey is generated from a master key, and the ''^""T.' I" '"^"^ P'^'^'^^" mformntion 

subkey is delivered to each software maker, thereby allow- ^^^^^^^^g ^^/^^^ ^^k. 

ing the software maker to manufacture legitimate disks at its , ' invention also provides an optical disk wherein at 

own factory ^^^^^ marking is formed by a laser to at least one 

To overcome Problem 6. position information of an I'l^^^'^i^^^^^^ "^''^ holding data wrinen thereon and 

antipiracy mark of the invention which differs from one disk 1"^' mfonnation of said marking or information 

to another, is used as a disk identifier. The position infor- T'^^nl'"^ .^^^^^ information is wraten to said disk 

mation and the disk serial number, i.e., the disk ID. are {hereto ^ ^''^ "^^"^"^ 

combined and encrypted together with a digital signature. tu - 

thus appending an unalterable disk ID to each disk. Since invention also provides an optical disk having a 

each completed disk has a dififercnt ID. the password is also ^^"^^"^^ such that at least one reflective film is sandwiched 

different. The password does not work on other disks. This indirectly between two members formed from 

enhances passwwd security matenal resistant to laser light, wherein at least one marking 

Also, with the secondary"recording of the invention, the ^"^"^'^ ' '''"^ ^^^^ ^^^^^^^^ 

password is secondary-recorded on the disk, permanently BRIEF DESCRIPTION OF THE DRAWINGS * . 

mi^ng the disk an operable disk. nC. 1 is a diagram showing a disk mantrfacturing process 

iipecific methods for overcoming the above six problems and a secondary recording process according to the present 

are disclosed below by way of embodiments. embodiment; HG. 2{a) is a top plan view of a disk according 

The invention provides a marking forming apparatus to the embodiment, {b) is a lop plan view of the disk 

comprising: marking forming means for applying at least according to the embodiment, (c) is a top plan view of the 
one marking to at least one reflective film formed to a disk; 55 disk according to the embodiment, {d) is a transverse sec- 

marldng position detecting means for detecting at least one tional view of the disk according to the embodiment, and (e) 

position of said marking; and position information output is a waveform diagram of a reproduced signal according to 

means for outputting said detected position as position the embodiment; 

information of said marking. FIG. 3 is a flowchart illustrating a process of recording 
The invention also provides a marking forming apparatus 60 encrypted position information on a disk in the form of a 

ftuther con^sing position information writing means for barcode according lo the present embodiment; 

writing at least said output position information or informa- HG. 4 is a diagram showing a disk fabrication process 

tion concerning said position information to said disk or to and a secondary recording process (part 1) according to the 

a different medium. present embodiment; 
The invention also provides a method of forming a laser 65 HG. 5 is a diagram showing the disk fabrication process 

marking to an optical disk, comprising the steps of: fo-raing and the secondary recording process (part 2) according to 

at least one disk; fonning a reflective film lo said formed the present embodiment; 
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FIG. 6 IS a diagram showing a two-layer disk fabrication FIG. 28 is a diagram showing a delected wavcfonn of a 

process (part 1) according to the present embodiment: second-layer marking signal according to the present 

FIG. 7 is a diagram shou-ing the tv^'o-laycr disk fabrication embodiment; 

process (part 2) according to the present embodiment; FIG. FIG. 29 is a block diagram of a disk manufacturing 

S{a) is an enlarged view of a nonrcflective portion of a ^ apparatus according to the present embodiment; 

laminated type according to the present embodiment, and (^) hG. 30 is a code diagram for a nonitflcctive portion 

is an enlarged view of a nonrcflective portion of a single- according to the present embodiment; 

plate type according to the present embodiment; xnn -it ■ a- u • ^ j en. 

^ FIG. 31 is a diagram showing a detected waveform from 

FIG. 9(a) IS a reproduced-waveform diagram for a non- the nonrcflective portion according to the present embodi- 

reflective portion according to the present embodiment, {b) ment: 

is a reproduced-waveform diagram for a nonrcflective por- • /. . . . ^ 

tion according to the presenrembodiment and (c) ka .I^2;M^/^'^T'^ ."^ cxpl^mng the c<«,tents of 

reproduced-waveform diagram for a nonreflecdvc portion '^""f^ ntonnaUon and the relaUve relauonsh.p 

according to the present embodiment; "'"'""^ '° P^"^"' embodunent: 

FIG. 10(a) is a cross-sectional view of a nonreflective " „„™„ f!i!f a •'^k'^"''T nonreHective 
portion of the laminated type according to the present POt^^^ed*" the two-laycrd.sk according to the present 
embodiment, and (b) is a cross-sectional view of a nonrc- 
flective portion of the single-plate type according to the . 34 is a diagram for explaining data flow in disk 
{^esent embodiment: distribution according to the present embodiment; 

HG. 11 is a schematic diagram, based on an observation . *^ ^ diagram showing a process of disk distribu- 

through a transmission electron microscope, illustrating a according to the present embodiment: 

aoss section of the nonreflective portion according to the FIG. 36 is a block diagram for explaining a manufacturing 

present embodiment; process when applying complex encryption to position 

FIG. Ilia) is a cross -sectional view of a disk according to 25 i^^omi^tion. etc. by using a master key, subkey, etc. accord- 

the present embodiment, and (b) is a crosssectional view of ^"S present embodiment; 

the nonreflective portion of the disk according to the present FIG. 37 is a block diagram for explaining the manufac- 

embodiment: turing process when applying complex encr>T5iion to posi- 

FIG. 13(a) is a diagram showing a physical arrangement ^i^" information, etc. by using the master key, subkey, etc. 
of addresses on a legitimate CD according to the 30 according to the present embodiment; 
embodiment, and (h) is a physical arrangement of addresses FIG. 38 is a flowchart in a reproduction apparatus accord- 
on an illegally duplicated CD according to the embodiment; ing to the present embodiment: 

FIG. 14 is a block diagram for disk manufacturing accord- FIG. 39 is a diagram showing a secret key cipher and a 

ing to the embodiment; public key cipher used in combination on optical disks and 

FIG. 15 is a block diagram of a low-reflectivity position ^heir relationship with reproduction apparatus according to 

detector according to the embodiment: ^be present embodiment; 

FIG. 16 is a diagram illustrating the principle of detecting PIG. 40 is a block diagram showing an outline of a 

address/clock positions of a low-reflectivity portion accord- process of recording position information, etc.. enaypted 

ing to the embodiment: a master key. subkey. etc.. on an optical disk and a 

FIG. 17 is a diagram showing a comparison of low- Process of reproducing such information according to the 

reflectivity portion address tables for a legitimate disk and a present embodiment: 

duplicated disk: FIG. 41 is a block diagram of an optical disk reproduction 

FIG. 18 is a flowchart illustrating a disk check procedure apparatus according to the present embodiment: and 

using a one-direction function according to the embodiment; 45 f^G. 42 is a flowchart illustrating the function of a 

FIG. 19 is a diagram showing a comparison of address scramble identifier and the switching between drive ID and 

coordinate positions on diflFerent master disks according to ^^^^ ID in a program installation process according to the 

the embodiment; present embodiment, 

FIG. 20 is a flowchart illustrating a low-reflectivity posi- DESCRIPTION OF THE PREFERRED 

tion detecting program according to the embodiment: 50 EMBODIMENTS 

FIG. 21 is a block diagram of a magnetic recording ^. ■ • ^ 

apparatus according to the embodiment; constimtion and operation of a marking forming 

xTxn .V « fl^, «u„ ♦ -ii . »• A i: apparatus, a method of foniung a laser marking to an optical 

FIG. 22 is a flowchart d ustraung a procedure for 1. ^^^^..a.,^:^ * . . j . j 

, OCA A- * *u disk, a reproduction apparatus, an opUcal disk, and a method 

encr>'ption. etc. using an RSA function according to the rri=.m.f3^h.««« — Au-ut^A j 1. 1 

^^uLai , rnn • a i_ ^ ii . a 55 manulactunng an optical disk will be descnbed below in 

embodiment: FIG. 23 is a flowchart illustraung a procedure ^ or*/.^«fn«**o —u^a* * r .1. 

r V, , • . ^ . J- accoroance with an embodiment of the present invention, 

for digital signature, etc. using an elliptic funcuon according t *u ^ r ^ u vi uic piocui uiv^imuu. 

to the embodiment* aescnption of the present embodiment given 

HG. 24 is a flowchart iUustraling a position information ^^f^ ^!'!^ '""'^ ^P^^^^°' 

VI » a i.w . a*t iiiuauaiiHg a puamwu uiiwiiiiauuii manufactunng a disk, forming a marking bv usine a aser. 

check process according to the embodiment; ,^ r/.^H.*no r..^c^tt^n ;nf«™oti« f "^"^b^*' 
t-To -I- . t-. . J. ^ , . .60 reading position mformalion of the marking, performing 

HG. 23 IS a block diagram of an information processmg encryption and other processing on the position information. 

apparatus according to the embodiment; etc. for writing on an optical disk, and reproducing the 

FIG. 26 is a top plan view of a second low-reflectivity optical disk on a player. The encr>'ption and reproduction 

portion according to the embodiment: operations are briefly described in the first part (1). 

FIG. 27 is a diagram showing a detected waveform of a 65 Next, in the second half part (2). the encryption and other 

first-layer marking signal according to the present embodi- processing of the marking position information, etc. and the 

tntni: deay-ption and reproduction of the position information, etc. 
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on the optical disk, briefly described in the first part (1), wUl 
be described in further detaU. The second part (2) also deals 
with various techniques for preventing piracy. 

In this patent specification, laser trinuniog is also referred 
to as laser marking, while a nonreflective optical marking 
portion is simply referred to as the marking or optical 
marking or. sometimes, as the physical ID unique to the disk. 
(1) FIG. 1 is a flowchart illustrating a genial process flow 
from disk manufacturing to the completion of an optical 
disk. 

First, the software company performs software authoring 
in software production process 820. The completed software 
is delivered from the software conq)aDy to the disk manu- 
facturing factory. In disk manufacturing process 816 at the 
disk manufacturing factor)', the completed software is input 
in step 8l8a. a master disk is produced (step 818^), disks are 
pressed (steps 818e. 818^), reflective films are formed on the 
respective disks (steps 818/, 8I8/1). the two disks are lami- 
nated together (step 818/), and a ROM disk such as a DVD 
or CD is completed (step 818m, etc.). 

The thus completed disk 800 is delivered to the software 
maker or to a factory under control of the softu'are maker, 
where, in secondar>' recording process 817. an anti -piracy 
marking 584. such the one shown in FIG. 2. is formed (step 
819a). and accurate position information of this mark is read 
by a measuring means (step 819^) to obtain the position 
information which ser\'es as the physical feature information 
of the disk. This physical feature information of the disk is 
encrypted in step 8l9c. The encrypted information is con- 
verted to a PWM-moduiaied signal which is then recorded 
in step 819i/ as a barcode signal on the disk by using a laser. 
The disk physical feature information may be combined 
together with sofc^^•are feaUjre information for encryption in 
step 819(7. 

The above processes will be described in further detail. 
That is. a disk fabrication process, a marking formation 
process, a marking position reading process, and an 
encrypted information writing process for an optical disk 
according to the present invention will be described in detail 
with reference to HGS. 4 and 5 and HGS. 8 to 12. A 
supplementary explanation will also be given dealing with a 
disk having two reflective layers with reference to FIGS. 6 
and 7. In the following description, the marking formation 
process and the marking position reading process arc col- 
lectively called the secondary recording process. 

(A) First, the disk fabrication process will be described. In 
the disk fabrication process 806 shown in FIG. 4. first a 
transparent substrate 801 is pressed in step (1). In step (2). 
a metai such as aluminum or gold is sputtered to form a 
reflective layer 802. An adhesive layer 804 formed from an 
ultraviolet curing resin is applied by spin coating to a 
substrate 803 formed in a different processing step, and the 
substrate 803 is bonded to the transparent substrate 801 
having the reflective layer 802, and they are rotated at high 
speed to make the bonding spacing uniform. By exposure to 
external ultraviolet radiation, the resin hardens, thus firmly 
bonding the two substrates together. In step (4). a fsinted 
layer 80S where a CD or DVD title is printed, is printed by 
screen printing or offset printing. Thus, in step (4). the 
ordinary laminated-type q)tical ROM disk is completed. 

(B) Next, the marking formation process will be described 
with reference to FIGS. 4 and 5. In FIG. 4. a laser beam from 
a pulsed laser 813 such as a YAG laser is focused through 
a converging lens 814 onto the reflective layer 802, to form 
a nonreflective portion 815 as shown in step (6) in FIG. 5. 
That is. a distinct waveform, such as the waveform (A) 
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shown in step (7), is reproduced from the nonreflective 
portion 815 farmed in step (6) in HG. 5. By slicing this 
waveform, a marking detection signal such as shown by 
waveform (B) is obtained, from which hierarchial marking 
5 position information comprising an address, such as shown 
in signal (d), and an address, a frame synchronizing signal 
number, and a reproduced clock count, such as shown in 
signal (e). can be measured. 

As previously stated, a supplementary explanation wiU be 
10 given below of an alternative type of disk (a two-layer 
lanunated disk) with reference to FIGS. 6 and 7. 

FIGS. 4 and 5 showed a disk generally known as a 
single-layer laminated disk which has a reflective layer only 
on one substrate 801. On the other hand, FIGS. 6 and 7 show 
15 a disk generally known as a two-layer laminated disk which 
has reflective layers on both substrates 801 and 803. For 
laser trimming, the processing steps (5) and (6) are funda- 
mentally the same for both types of disks, except with 
significant differences which are briefly described below. 
20 First, while the single-layer disk uses a reflective layer 
formed from an alununum film having reflectivity as high as 
70% or over, in the two-layer disk the reflective layer 801 
formed on the reading-side substrate 801 is a semitranspar- 
ent gold (Au) film having a reflectivity of 30%. while the 
25 reflective layer 802 formed on the print-side substrate 803 is 
the same as that used in the single-layer disk. Second, as 
compared with the single-layer disk, the two-layer disk is 
required to have high optical accuracy; for example, the 
adhesive layer 804 must be optically transparent and be 
31"! uniform in thickness. a«d the optical transparency must not 
be lost due to laser trimming. RGS. 7(7j. 7(8). and 7(9) 
show the waveform from the first layer of the rwo-recording- 
layer disk. The waveform from the second layer is similar to 
that from the first layer, though the signal level is lower than 
35 from the first layer. However, since the first and second 
layers are bonded together, relative positional accuracy 
between them is random and can be controlled only with an 
accuracy of a few hundred microns. As will be described 
later, since the laser beam passes through the two reflective 
4C films, to make an illegal disk the posiUon informations on 
the first and second layers for the first mark, for example, 
have to be made to match the same value on the legitimate 
disk. But making them match would require a near- 
submicron accuracy in laminating, and consequently, mak- 
45 ing illegal disks of the two-layer type is practically impos- 
sible. 

The technique for forming the nonreflective optical mark- 
ing portion will be described in further deUil in sections (a) 
to (d) below with reference to FIGS. 8 to 12. etc.. dealing 
50 with the laminated type in comparison with a single-plate 
type. FIGS. 8(a) and (b) are micrographs showing plan 
views of nonreflective optical marking portions, and FIG. 10 
is a simplified schematic aoss-sectional view of a nonre- 
flective p(Mtion of the two-layer laminated disk, (a) Using a 
55 5 jjj/pulse YAG laser, a laser beam was applied to a 500- 
angstrom aluminum layer lying 0.6 mm below the surface of 
a i.2-mm thick ROM disk consisting of two 0.6-mm thick 
disks laminated together, and, as a result, a 12 jun wide 
slit-like nonreflective portion 815 was formed, as shown in 
60 the X 750 micrograph of nG. 8(0). In this X 750 
micrograph, no aluminum residues were observed on the 
nonreflective portion 815. Thick swollen aluminum layers. 
2000 angstroms thick and 2 jim wide, were observed along 
boundaries between the nonreflective portion 815 andreflec- 
65 live portions. As shown in FIG. 10(a). it was confirmed that 
no significant damage had occurred inside. In this case, the 
application of the pulsed laser presumably melted the alu- 
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minuni reflective layer, causing a phenomenon of molten melted. The molted aluminum in this state is caused by 
aluminum buildup along the boundaries on both sides due to surface tension to build up along boundaries S2la and 8216, 
the surface tension. We call this a hot melt surface tension with tension being applied to both sides, thus forming 
(HMST) recording method. This is a characteristic phenom- buildups 822a and S22b of hardened aluminum, as shown in 
enon observed only on a laminated disk 800. FIG. 11 is a 5 FIG. 12(^). The nom-efieciive portion 584 free from alumi- 
schematic diagram, based on an observation through a num residues is thus formed. This shows that a clearly 
transmission elecu-on microscope (TEM), illustrating a cross denned nonrcflective portion 5S4 can be obtained by laser- 
seaion of the nonreflective portion formed by the above trimming the laminated disk as shown in FIG- lO(fl). Expo- 
laser trimming process. In the figure, if the aluminum film sure of the reflective layer to the outside environment due to 
swollen portion is 1.3 pm wide and 0.20 pm thick, the 10 a /^^^^ged protective layer, which was the case with the 
amount of increased aluminum in that portion is 1.3x(0.20- single-plate type, was not observed even when the laser 
0.05)=0.195 pm-. The amount of aluminum originaUy power was increased more than 10 times the optimum value, 
deposited in a half portion (5 pm) of the laser exposed region ^^^^ '^^^^ trirmning, the nonreflective layer 584 has the 
(10 pm) was 5x0.05=0.250 pm-. The difference is calculated structure shown in RG. \2(b) where it is sandwiched 
as 0.250-0.195=0.055 pm^. In terms of length, this is 15 between the two transparent substrates 801 and sealed on 
equivalent to 0.055/0.05=1.1 \im. This means that an aiu- ^^^^ sides with the adhesive layer 804 against the outside 
minum layer of 0.05 pm thickness and 1.1 pm length environment, thus producing the effect of protecting the 
remained, and therefore, it can be safely said that almost all structure from environmental effects, 
aluminum w-as drawn to the film swollen portion. Thus, the (A) Another benefit of laminating two disks together will 
result of the analysis of the figure also verifies the explana- 20 described next. When secondary recording is made in the 
tion about the above-described characteristic phenomenon. fo™ a barcode, an illegal manufacitirer can expose the 
(b> We will next deal with the case of a single-plate optical aluminum layer by removing the protective layer in the case 
disk (an optical disk comprising a single disk). An experi- of a single-plate disk, as shown in FIG. 10(Z?).This gives rise 
ment was conducted by applying laser pulses of the same ^ possibility that nonecrypted data may be tampered with 
power to a 0.05 pm thick aluminum reflective film formed 25 r^'^^positing an aluminum layer over the barcode portion 
on a single-sided molded disk, of which result is shown in ^ legitimate disk and then laser-trimming a different 
FIG. Siby .As shown in the figure, aluminum residues were barcode. For example, if the ID number is recorded in 
observed, and since these aluminum residues cause rcpro- plaintext or separately from main cipheitext. in the case of 
duction noise, it can be seen that the single-plate type is not ^ single-plate disk it is possible to alter the ID number, 
suitable for secondar>' recording of optical disk information 30 t^nabling illegal use of the software by using a different 
of which a high densit>' and a low error rale are demanded, password. However. Lf the secondao' recording is made on 
Furthermore, unlike the laminated disk, in the case of the laminated disk as shown in FIG. Wa), it is diiBcuJt to 
single-plate disk. Uie protective layer 862 is inevitably separate the laminated disk into two sides. In addition, when 
damaged, as shown in FIG. I0{b), when the nonreflective removing one side from the other, the aluminum reflective 
portion is subjected to laser trimming. The degree of damage 35 partially destroyed. When the anti-piracy marking is 
depends on the laser power, but the damage cannot be destroyed, the disk will be judged as being a pirated disk and 
avoided even if the laser power is controlled accurately. oot run. Accordingly, when making illegal alterations to 
Moreover, according to our experiment, the printed layer laminated disk, the yield is low and thus illegal alter- 
805 formed by screen printing to a thickness of a few ations are suppressed for economic reasons. Panicularly. in 
hundred microns on the proteaive layer 862 was damaged 40 ^^^^ two-layer laminated disk, since the polycar- 
when its thermal absorptance was high. In the case of the bonate material has temperature/humidity expansion 
single-plate disk, to address the problem of protective layer coefficients, it is nearly impossible to laminate the two disks, 
damage, either the protective layer has to be applied once ^"^^ separated, by aligning the anti-piracy markings on the 
again or the laser cut operation should be performed before ^^^^ second layers with an accuracy of a few microns, 
depositing the protective layer. In any case, the single-plate 45 ^^^^ produce disks. Thus, the iwo-layer type provides 
type may present a problem in that the laser cut process has ^ greater effectiveness in piracy prevention. It was thus 
to be incorporated in the pressing process. This limits the found that a clearly defined slit of a nonreflective portion 
application of the single-plate disk despite its usefulness. be obtained by laser- trimming the laminated disk 

(c) A comparison between single-plate disk and laminated 
disk has been described above, using a two-layer laminated 5o technique for forming the nonreflective optical mark- 
disk as an example. As is apparent from the above portion has been described in (a) to (d) above, 
description, the same effect as obtained with the two-layer (O Next, the process of reading the position of the thus 
laminated disk can be obtained with the single-layer lami- fonncd marking will be described, 
nateddtsk. Using FIGS. 12(a), 12(d). etc., a further descrip- FIG. 15 is a block diagram showing a low reflectivity light 
tion will be given dealing with the single-layer type. As 55 amount detector 586 for detecting the nonreflective optical 
shown in FIG. 12(a). the reflective layer 802 has the marking portion, along with its adjacent circuitry, in an 
transparent substrate 801 of polycarbonate on one side, and optical disk manufacturing process. FIG. 16 is a diagram 
the hardened adhesive layer 804 and a substrate on the other illustrating the principle of detecting address/clock positions 
side, the reflective layer 802 thus being hermetically sealed of the low reflectivity portion. For convenience of 
therebetween. In this condition, pulsed laser light is focused 60 explanation, the following description deals with the oper- 
thcreon for heating: in the case of our experiment, heat of 5 ating principle when a read operation is performed on a 
pj/pulse is applied to a circular spot of 10 to 20 pm diameter nonreflective portion formed on an optical disk constructed 
on the reflective layer 802 for a short period of 70 ns. As a from a single disk- It will be recognized that the same 
resuh, the temperature instantly rises to 600° C, the meldng operating principle also applies to an optical .disk con- 
point, melting state is caused. By heat transfer, a small 63 structed from two disks laminated together, 
portion of the transparent substrate 801 near the spot is As shown in FIG. 15, the disk 800 is loaded into a 
melted, and also a portion of the adhesive layer 804 is marking reading apparatus equipped with a low reflectivity 
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position detector 600 to read the marking, and in this case, 
since a signal waveform 823 due to the presence and absence 
of pits and a signal wavefonn 824 due to the presence of the 
nonreflective portion 584 are significantly different in signal 
level, as shown in the waveform diagram of FIG. 9(a). they 
can be clearly distinguished using a simple circuit. 

The start position and end position of the nonreflective 
portion 564 having the above waveform can be easily 
detected by the low reflectivity light amount deteaor 586 
shown in the block diagram of FIG. 15. Using the repro- 
duced dock signal as the reference signal, position infor- 
niation is obtained in a low reflectivity position information 
output section 596. 

As shown in FIG. 15. a comparator 587 in the low 
reflectivity light amount detector 586 detects the low reflec- 
tivity light portion by detecting an analog light reproduced 
signal having a lower signal level than a light amount 
reference value 588. During the detection period, a low 
reflectivit)' ponion detection signal of the waveform shown 
in FIG. 16(5) is output. The addresses and clock positions of 
the start position and end position of this signal are mea- 
sured. 

The reproduced light signal is wavsshaped by a waveform 
shaping circuit 590 having an AGC 590a. for conversion 
into a digital signal. A clock regenerator 38a regenerates a 
clock signal from the waveshaped signal. An EFM demodu- 
lator 592 in a demodulating section 591 demodulates the 
signal, and an ECC corrects errors and outputs a digital 
signal. The EFM-demoduiated signal is also fed to a physi- 
cal address output section 593 where an address of M.SF. 
from Q bits of a subcode in the case of a CD. is output from 
an address output section 594 and a synchronizing signal, 
such as a frame synchronizing signal, is output from a 
synchronizing signal output section 595. From the clock 
regenerator 38a. a demodulated clock is output. 

In a low reflectivity portion address/clock signal position 
signal output section 596, a low reflectivity portion start/end 
position detector 599 accurately measures the start posistion 
and end position of the low reflectivity portion 584 by using 
an (n-l) address output section 597 and an address signal as 
weli as a clock counter 598 and a synchronizing clock signal 
or the demodulated clock. This method will be described in 
detail by using the waveform diagrams shown in FIG. 16. As 
shown in the cross- sectional view of the optical disk in FIG. 
16(1). the low reflectivity portion 584 of mark number 1 is 
formed partially. A reflection selope signal such as shown in 
FIG. 16(3), is output, the signal level from the reflective 
portion being lower than the light amount reference value 
588. This is detected by the light level comparator 587. and 
a low reflectivity light detection signal, such as shown in 
FIG, 16(5). is output from the low reflectivity light amount 
detector 586. As shown by a reproduced digital signal in 
FIG. 16(4), no digiul signal is output from the mark region 
since it does not have a reflective layer. 

Next, to obtain the start and end positions of the low 
reflectivity light detection signal, the demodulated clock or 
synchronizing clock shown in FIG. 16(6) is used along with 
address information. First, a reference clock 605 at address 
0 in FIG. 16(7) is measured. When the address immediately 
preceding the address n is detected by the (n-1) address 
output section 597. it is found that the next sync 604 is a 
sync at address n. The number of clocks from the synch 604 
to the reference clock 605. which is the start position of the 
low reflectivity light detection signal, is counted by the clock 
counter 598. This clock count is defined as a reference delay 
time TD which is measured by a reference delay time TD 
measuring section 608 for storage therein. 
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The circuit delay time varies with reproduction apparatus 
used for reading, which means that the reference delay time 
TD varies depending on the reproduction apparatus used. 
Therefore, using the TD. a time delay corrector 607 applies 
5 lime correction, and the resulting effect is that the start clock 
count for the low reflectivity poruon can be measured 
accurately if reproduction apparatus of different designs arc 
used for reading. Next, by finding the clock count and the 
start and end addresses for the optical mark No. 1 in the next 
track, clock m+14 at address n+i2 is obtained, as shown in 
FIG. 16(8). Since TD=m+2, the clock count is corrected to 
12. but for convenience of explanation, n+14 is used. We 
will describe another method, which eliminates the effects of 
varying delay times witlmut having to obtain the reference 
delay time TD in the reproduction apparatus used for read- 
ing. This method can check whether the disk is a legitimate 
disk or not by checking whether the positional relationship 
of mark 1 at address n in FIG. 16(8) relative to another mark 
2 matches or not. That is, TD is ignwed as a variable, and 
the difference between the position. Al=al+TD, of mark 1 
measured and the position. A2=a2+TD. of mark 2 measured 
is obtained, which is given as Al~A2=al-a2. At the same 
time, it is checked whether this difference matches the 
difference. ai-a2. between the position al of the decrypted 

25 mark 1 and the position information a2 of the mark 2. 
thereby judging whether the disk is a legitimate disk or not. 
The effect of this method is that the positions can be checked 
after compensating for variations of the reference delay lime 
TD by using a simpler constitution. 

30 (^^) ^txt, the encrypted information writing process will 
be described. The position information read in the process 
(C) is enciypted (digital signature), as will be described in 
detail in the next section (2). and is written on the optical 
disk using a barcode or other method. FIG. 3 shows how this 

33 is done. In FIG. 3(1), the reflective layer is trimmed by a 
pulsed laser, and a barcode-like trimming pattern, such as 
shown in FIG. 3(2). is formed. At a reproduction apparatus 
(player), an envelope waveform some portions of which are 
missing as shown in RG. 3(3) is obtained. The missing 
portions generate a low level signal which is different from 
a signal generated from an ordinary pit. and this signal is 
sliced by a second slice level comparator to obtain a low 
reflectivity portion detection signal as shown in FIG. 3(4). 
From this low reflectivity portion detection signal, a PWM 

45 demodulator 621 in FIG. 3(5) demodulates the signal con- 
taining encr>'pted information. 

The processing steps in the optical disk manufacturing 
process have been described above. Next, the constitutjon 
and operation of a reproduction apparatus (player) for repfo- 

50 ducing the thus completed optical disk on a player will be 
described with reference to FIG. 41. 

In the figure, the construction of an optical disk 9102 will 
be described first. A marking 9103 is formed on a reflective 
layer (not shown) deposited on the optical disk 9102. In the 

55 manufacturing process of the optical disk, the position of the 
marking 9103 was detected by position detecting means, and 
the detected position was encrypted as marking position 
information and written on the optical disk in the form of a 
barcode 9104. 

60 Position information reading means 9101 reads the bar- 
code 9104. and decrypting means 9105 contained therein 
decrypts the contents of the barcode for output. Marking 
reading means 9106 reads the actual position of the marking 
9103 and ou^uts the result. Comparing/judging means 9107 

65 conyarcs the decrypted result from the decrypting meaos 
9105 contained in the position information reading means 
9101 with the result of reading by the marking reading 
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roeaos 9106, and judges whether the two agree within a hand, in the case of the pirated CD. the first marking is 

predetermined allowable range. If they agree, a reproduction located at the 81 si clock position in the sector of address A2, 

signal 9108 for reprodudngtheopticaldi.sk is output: if they as shown in the address table 609-c. By detecting this 

do not agree, a rq}roduction stop signal 9109 is output. difference of the first marking position between the legiti- 

Control means (not shown) controls the reproduction opera- 5 "late disk and pirated disk, the pirated disk can be distin- 

tton of the optical disk in accordance with these signals; guished. Likewise, the position of the second marking is also 

when the reproduction stop signal is output, an indication to different. To make the position information match that of the 

the effect that the optical disk is an illegal duplicated disk is legitimate disk, the reflective film at the 262nd position in 

displayed on a display (not shown) and the reproduction °^ address A 1 must be formed with an accuracy of 

operation is stopped. In the above operation, it will be lO ^^^^ """^^ ^'^^ ^^'^ otherwise, the pirated disk 

recognized that it is also possible for the marking reading cannot be run. 

means 9106 to use the decrypted result from the decrypting Accordingly, as shown in RG. 14. in die reproduction 

means 9105 when reading the actual position of the marking apparatus, the encrypted table is decrypted to reconstnicl the 

9103. legitimate uble which is then checked by a check program 

Thus the reproduction apparatus of the above construction 15 p,!^ differentiate between the legitimate disk and UlegaUy 

can detect an Ulegally duplicated optical disk and stop the ^"P*^^^^^^ ^isk. and to slop the reproduction operation in the 

reproduction operation of the disk, and can prevent iUegal f"*'?^.^^ ^ duplicated disk. In the example of RG. 16. the 

duplicates practically legitmiate disk and illegally duplicated disk have low reflec- 

. . ' 1. J I. r ^^^*^y portion address tables 609 and 609x respectively, 

nnl^l hT'"^ description has dealt with the process from ^^ere values are different as shown in FIG. 17. In the case 

opacal disk manufacturing to the reproducuon operation of .^e legitimate disk, in the track following the mark 1 the 

the p ayer, and we wd now proceed to a description of start and end positions are m+ 14 and m+267!respectively. as 

appertaining maaers relaUng to the detads of the above .^own in FIG. 16(8). whereas in the ca,se of the UlegaUy 

^"^^^^^^^^ duplicated disk these are m+24 and m+277. respectively, as 

H ^ reflectivity portion address table, which is a shown in FIG. 16(9). Therefore, the corresponding values in 

Q position information list for the low reflectivity portion. wLU the low reflectiviry portion address tables 609 and 609x are 

Q be explained. different, as shown in FIG. 17. thus making it possible to 

rz Laser markings are formed at random in the anti- distinguish the duplicated disk. If an illegal manufacturer 

1=^ piracy mark formation process at die factory. No laser desires to make a copy of the disk having the low reflectivity 

\| markings formed in this manner can be identical in physical 30 portion address table 609. they will have to perform a 

feature. In the next process step, the low reflectivity portion precise laser trimming operation with the resolution of the 

584 formed on each disk is measured with a resolution of reproduced clock signal as shown in FIG. 16(8). In the case 

|1: 0.13 Mm in the case of a DVD. to construct a low reflectivity of a DVD disk, the period T of the reproduced clock pulse. 

Jl portionaddresstable609asshowninFIG. 13(a). Here. FIG. when converted to a distance on the disk, is 0.13 \im as 

s 13(fl) is a diagram showing a low reflectivity portion address 35 shown in FIG. 27(5). Accordingly, to make an illegal copy. 

|_i table, etc. for a legitimate CD manufacuired in accordance the reflective fiUn will have to be removed with a submicron 

k| with the present embodiment, and FIG. \3(b) is concerned resolution of 0.1 |jm. It is true tiiat when an optical head 

with an illegally duplicated CD. The low reflectivity portion designed for an optical disk is used, a recording can be made 

\sJ address table 609 is encrypted using a one-direction function on a recording film such as a CD-R with a submicron 

S| such as the one shown in FIG. 18. and in the second ^ resolution. But in this case, the reproduced waveform will be 

P| reflective-layer forming step, a series of low reflectivity as shown in FIG. 9(c), and the distinct wavcfonn 824 as 

^ portions 584c to 584^, where the reflective layer is removed. shown in FIG. 9{a) cannot be obtained unless the reflective 

^ is recorded in a barcode-like pattern on the innermost film is removed. 

portion of the disk, as shown in FIG. 2. Alternatively, it may (b) A first method of achieving mass production of pirated 

be recorded on a magnetic recording portion 67 of a 45 disks by removing the reflective film may be by laser 

CD-ROM, as shown in FIG. 14. FIG. 18 is a flowchart trimming using a high output laser such as a YAG laser. At 

illustrating a disk check procedure by the one-way function the present state of technology, even the most highly accu- 

used for the encryption, and FIG, 14 is a block diagram of rate machining laser trimming can only achieve a processing 

a disk making apparatus and a special recording/ acciuacy of a few microns. In the laser trimming for 

reproduction apparatus. As shown in FIG. 13. the legitimate 50 semiconductor mask corrections, it is said that 1 \im is the 

CD and the illegally duplicated CD have the low reflectivity limit of the processing accuracy. This means that it is 

portion address tables 609 and 609x, respectively, which are diCGcult to achieve a processing accuracy of 0.1 urn at the 

substantially different from each other. One factor resulting mass production level. 

in this difference is that laser markings identical in physical (c) As a second method. X-ray exposure equipment for 

feature cannot be made, as earUer noted. Another factor is 55 processing semiconductor masks for VLSIs and ion beam 

that the sector address preassigned to the disk is different if processing equipment are known at the present time as 

the master disk is different. equipment that can achieve a processing accuracy of the 

Referring now to FIG. 13, we will describe how the order of submlcrons, but such equipment is very expensive 

marking position information differs between the legitimate and furthermore, it takes much time to process one piece of 

disk and pirated disk. The figure shows an example in which 60 disk, and if each disk were processed using such equipment, 

the above two factors are combined. In the example shown. the cost per disk would be very high. At the present time, 

two markings are fonned on one disk. In the case of the therefore, the cost would become higher than the retail price 

legitimate CD, the first marking of mark number 1 is located of most legitimate disks, so that making pirated disks would 

at the 262nd clock position from the start point of the sector not pay and meaningless. 

of logical address Al. as shown in the address table 609. In 65 (d) As described above, with the first method that involves 

the case of a DVD. one clock is equivalent to 0.13 \mL and laser trimming, it is difficult to process with a submicron 

the measurement is made with this accuracy. On the other accuracy, and therefore, it is difficult to mass produce pirated 
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disks. On the other hand, with the second method using the 
submicron processing technology such as X-ray exposure, 
the cost per disk is so high that niaking pirated disks is 
meaningless from an economic point of view. Accordingly, 
making illegal copies can be prevented until some day in the 
future when low-cost submiaon processing technology for 
mass production becomes practical. Since practical imple- 
mentation of such technology will be many years into the 
future, production of pirated disks can be prevented. In the 
case of a two-layer disk with a low reflectivity portion 
fonned on each layer as shown in FIG. 33. an illegally 
duplicated disk cannot be manufactured unless the pits on 
top and bottom are aligned with good accuracy when 
laminating, and this enhances the effectiveness in preventing 
piracy. 

(B) Next, we will describe how the arrangement angle of 
the low reflectivity portion on the disk can be specified. 

In the present invention. suflScient effectiveness in piracy 
prevention is provided by the reflective layer level 
mechanism, that is, by the low reflective marking alone. In 
this case, the prevention is effective even if the master disk 
is a duplicate. However, the effectiveness can be enhanced 
by combining it with the piracy prevention technique at the 
master disk level. If the arrangement angle of the low 
reflectivity portion on the disk is specified as shown in Table 
532c and Table 609 in FIG. U{a). an illegal manufacturer 
would have to accurately duplicate even the arrangement 
angle of each pit on the master disk. This would increase the 
cost of pirated disks and hence enhance the capability to 
deter piracy. 

fC) The points of the present invention will be summa- 
rized below. In the present invention, a legitimate manufac- 
turer can make a legitimate disk by processing the disk using 
a general -purpose laser trimming apparatus having a pro- 
cessing accuracy of several tens of microns. Though a 
measuring accuracy of 0.13 pm is required, this can be 
achieved by conventional circuitry contained in a consumer 
DVD player. By encrypting the measured result with a secret 
encryption key. a legitimate disk can be manufactured. That 
is. the legitimate manufacturer need only have a secret key 
and a measuring apparatus with a measuring accuracy of 
0. 13 Mm. while the required processing accuracy is two or 
three orders of magnitude lower, that is. several tens of 
microns. This means that a convectional laser processing 
apparatus can be used. On the other hand, an illegal 
manufacturer, who does not have a secret key, will have to 
directly copy the encrypted information recorded on the 
legitimate disk. This means that a physical mark correspond- 
ing to the encrypted position infonnation. that is, the posi- 
tion information on the legitimate disk, must be formed with 
a processing accuracy of 0.13 fan. That is, the low reflective 
mark has to be fonned using a processing apparatus having 
a processing accuracy two orders of magnitude higher than 
that of the js'ocessing apparattis used by the legitimate 
manufacturer. Volume production with an accuracy higher 
by two orders of magnitude, i.e., with an accuracy of 0. 1 pm, 
is diflScult both technically and economically, even in the 
foreseeable future. This means that production of pirated 
disks can be prevented during the life of the DVD standard. 
One point of the invention is to exploit the fact that the 
measuring accuracy is generally a few orders of magnitude 
higher than the processing accuracy. 

In the case of CLV. the above method exploits the fact that 
the address coordinate arrangement differs from one master 
disk to another, as previously noted. FIG. 19 shows the result 
of the measurement of address locations on actual CDs. 
Generally, there are two types of master disk, one reccarded 
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by rotating a motor at a constant rotational speed, i.e.. with 
a constant angular velocity (CAV). and the other recorded by 
rotating a disk with a constant linear velociry (CLV). In the 
case of a CAV disk, since a logical address is located on a 
5 predetennined angular position on the disk, the logical 
address and its physical angular position on the disk are 
exacdy the same no matter how many master disks are 
made. On the other hand, in the case of a CLV disk, since 
only the linear velocity is controlled, the angular position of 
jQ the logical address on the master disk is random. As can be 
seen from the result of the measurement of logical address 
locations on actual CDs in FIG. 19. the tracking pitch, start 
point, and linear velocity vary slightly from disk to disk even 
if exactly the same data is recorded using the same mastering 

,3 apparatus, and these eaors accumulate, resulting in different 
physical locations. In FIG. 19. the locations of each logical 
address on a first master disk are indicated by white circles, 
and the locations on second and third master disks are 
indicated by black circles and triangles, respectively. As can 

20 be seen, the physical locations of the logical addresses vary 
each time the master disk is made. FIG. 17 shows the low 
reflectivity portion address tables for a legitimate disk and 
an illegally duplicated disk for co.mparison. 
The method of piiacy prevention at the master disk level 

25 has been described above. This is. when master disks of CLV 
recording, such as a CD or DVD. are made from the same 
logic data by using a mastering apparatus, as shown in FIG. 
19. the physical location of each pit on the disk varies 
between master disks, that is. between the legitimate disk 

30 and pirated disk. This method distinguishes a pirated disk 
from a legitimate disk by taking advantage of this charac- 
teristic. The piiacy prevention technology at the master disk 
level can prevent pirated disks at the logic level made by 
simply copying data only from the legitimate disk. However. 

35 recent years have seen the emergence of pirate manufactur- 
ers equipped with more advanced technologies, who can 
make a master disk replica identical in physical feature to a 
legitimate disk by melting the polycarbonate substrate of the 
legitimate disk. In this case, the piracy prevention method at 

40 the master disk level is defeated. To prevent this new threat 
of pirated disk production, the present invention has devised 
the piracy prevention method at the reflective layer level 
wherein a marking is formed on a reflective film. 

According to the method of the present invention, the 

45 marking is formed on each disk pressed from a master disk, 
even if disks are pressed from the master disk, by removing 
a portion of the reflective film in the reflective film formation 
process. As a result, the position and shape of the resulting 
low reflective marking is different from one disk to another. 

50 In a usual process, it is next to impossible to partially remove 
the reflective film with an accuracy of submicrons. This 
serves to enhance the effectiveness in preventing duplication 
since duplicating the disk of the invention does not justify 
the cost. 

55 FIG. 20 shows a flowchart for detecting a duplicated CD 
by using the low reflectivity portion address table. The delay 
time needed to detect the optical mark varies only slightly 
due to the optical head and circuit designs of the reproduc- 
tion apparatus used. This of the delay time TD circuit can be 

60 predicted at the design stage or at the time of mass produc- 
tion. The optical mark position information is>obtained by 
measuring the number of clocks, that is. the time, from the 
frame synchronizing signal. Due to the effect of the circuit 
delay time, aji error may be caused to detected dau of the 

65 optical mark position information. As a result, a legitimate 
disk may be erroneously judged as being a pirated disk, 
inconveniencing a legitimate user. A measure to reduce the 
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effect of the circuit delay time TD will be described below. accurately with a resolution of 1 T unit, that is. with a 

Further, a scratch made on a disk after purchase may cause resolution of 0.13 \im in the case of die DVD standard, by 

an intmiiption in the reproduced clock .signal, causing an using a conventional player, thereby co accurately measure 

error of a few clocks in the measurement of the opdcal mark the optical mark of the present invention. RGS. 27 and 28 

posiuon infonnation. To address iWs problem, a tolerance 5 show the optical mark address reading method of HG. 16 as 

fdll .n ??h^r")L ^' T''''^'^ ^PP»^^^ D^I^ ^^"dard. applanation of signals (1). (2). 

a disk, and while allowing a certain degree of tolerance on (a. (z\ :„ irrr-c ^ L u 

die measured value according to the acmal situation at the Sli /hp , ^ k ^ FT 

time of reproduction, the reproduction operation is permitted ^P^"^°S pnnaple is the same as that shown m 
when the pass count 867 is reached; the margin allowed for 

an error due to a surface scratch on the disk can be controlled ' correspondence between HG. 16. which iUustrates 

by the copyright owner prior to the shipment of the disk. ^^e pnnaple of the detection operation for detecting the 

This will be described with reference to HG. 20. position of a low reflecUvity portion on a CD, and RGS. 27 

In FIG. 20. the disk is reproduced in step S65a to recover ^""^ '^^'''^ concerned with a DVD. is given below 

the encrypted position informaUon from the barcode record- ™' ^^(^^ corresponds to FIGS. 27(1) and 28(1). The 

ing portion or pit recording portion of the present invention. reproduced clock signal in RG. 16(6) corresponds to that 

In step S65b. decry ption or signature verification is ^^^"^^ ^" ^^S. 27(5) and 28(5), Address 603 in FIG. 16(7) 

performed, and in step 865c. a list of optical mark position corresponds to that shown in RGS. 27(2) and 28(2). 

information is recovered. Next, if the delay U'me TD of a Frame synch 604 in FIG. 16(7) corresponds to that shown 

reproduction circuit is stored in die circuit delay time storing 2c ^^S- 27(4) and 28(4). Starling clock number 605a in 

section 608^ in the refn-oduction apparatus of FIG. 15, TD ^^(*^ corresponds to reproduced channel clock number 

is read out in step 865/i and the process proceeds to step '^G. 27(6). Instead of the end clock number 606 in FIG. 

865a-. If TD is not stored in the reproduction apparaUis, or if 1^(7). in FIGS. 27(7) and 28(7) data is compressed using a 

a measurement insu-uction is recorded on the disk, the ^"^^^ marking length. 

process proceeds to step 865 J to enter a reference delay time 25 illustrated, the detection operation is fundamentally 

measurement routine. When address Ns-1 is detected, the the same between CD and DVD. A first difference is that a 

start position of the next address Ns is found. The frame 1-bit mark layer identifier 603fl as shown in FIG. 27(7) is 

synchronizing signal and the reproduced clock are counted. included for identifying whether the low reflectivity portion 

and in step 865/ the reference optical mark is detected. In is of the one-layer type or two-layer type. The two-layer 

step86S^, the circuit delay time TD is measured and stored. 3^ DVD structure provides a greater anti-piracy effect, as 

This operation is the same as the operation to be described previously described. A second difference is that since the 

later with reference to FIG. 16(7). In step 865jr. the optical line recording density is nearly two times as high. 1 T of the 

mark located inside address Nm is measured. In steps 865/. reproduced clock is as short as 0. 13 pm, which increases the 

865y. 865^, and 86Sm, the optical mark position information resolution for the detection of the position information and 

is detected with a resolution of one clock unit, as in steps 35 thus provides a greater anti-piracy effect. 

U5d. 865v, 865/ and 865>. Next, in step 865fi, a pirated ' Shown in FIG. 27 is the signal from the first layer in a 

disk detection routine is entered. First, the circuit delay time two-layer optical disk having two reflective layers. The 

TD is corrected. In step 865p. the tolerance 866. i.e.. tA. and signal (1) shows the condition when the start position of an 

pass count 867 recorded on the disk, as shown in FIG. 27. optical mark on the first layer is detected. FIG. 28 shows the 

are read to check whether or not the position information ^ condition of the signal from the second layer, 

measured in step 865^ falls within the tolerance tA. If the To read the second layer, a first/second layer switching 

result IS OK in step 865r, then in step 865j it is checked section 827 in HG. 15 sends a switching signal to a focus 

whether the checked mark count has reached the pass count. control section 828 which then controls a focus driving 

If the result is OK. then in step 865m the disk is judged as section 829 to switch the focus from the first layer to the 

being a legitimate disk and reproduction is permitted. If the 45 second layer. From HG. 27, it is found that the mark is in 

pass count is not reached yet. the process returns to step address (n), and by counting the frame synchronizing signal 

865z If the result is NO in step 865r. then it is checked in (4) using a counter, it is found that the mark is in frame 4. 

step 865/ whether the error detection count is smaUer than From signal (5). the PLL reproduced clock number is found. 

NA. and only when the result is OK. the process returns to and the optical marking position data as shown by the signal 

step 863 J. If it 15 not OK. then in step 865v the disk 13 judged 50 (6) is obtained. Using this position data, the optical mark can 

as being an illegal disk and the operation is stopped. be measured with a resolution of 0.13 pm on a conventional 

As described, since the circuit delay time TD of the consumer DVD player, 

reproduction apparatus is stored in the IC ROM, optical (E) Additional matters relating to the two-disk laminated 

mark position information can be obtained with inaeascd optical disk will be further described below 

accuracy. FurthenBore. by setting the tolerance 866 and pass 55 FIG. 28 shows address position information pertaining to 

count for the sofUvare on each disk, the cntena for pirated the optical marking formed on the second layer Since laser 

?''"n''" f ^"^'1 '"'^Z'*'"^ u .'"^"^ ^^Sht penetrates the first and second layers through the same 

purchase. Tms has the effect of reducing the probabiUty of nonieflective portion 815 formed on the first reflective layer 

a le^timate disk being erroneously judged as an illegal disk ^ 802 and the nonrtjflective portion 826 formed on the second 

(D) A further descnption will be given of the operation of reflective layer 825 are identical in shape. This is depicted in 

reading the nonreflective optical marking portion of the the perspective view of FIG, 33. In the present invention, 

two-disk lammated optical disk, focusing on points that after the transparent substrate 801 and the second substrate 

were not touched on in the foregoing description of the 803 are laminated together, laser light is appUed penetrating 

operacmg pnnaple. 53 through to the second layer to form an identical mark 

That is. as shown in FIG. 16. the stan position address thereon. In this case, since coordinate arrangements of pits 

number, frame number, and clock number can be measured are different between the fint and second layers, and since 
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Ihe positional relauonship between the fiist and second is appended), step 698 where the posiUon infomiation is 

layers is random when laminating them together, the pit decrypted (or the signature is verified or authenticated) in 

positions where the mark is formed are different between ihe the reproduaion apparatus, and step 735h- where a check is 

first and second layers, and entirely different position infer- made to determine whether the disk is a legitimate optical 
mation is obtained from each layer. These two kinds of 5 disk ornot. 

position information are enaypted to produce an anti-piracy First, in step 735^. the marking position infonnation on 

disk. If It IS atten¥.tcd to dupUcate this disk iilegaUy. the ,he optical disk is measured in step 72Sb. The position 

optical marks on «hc^o layers would have to be aligned information is then compressed in step 735rf. and the com- 

with a resoluuon of about 0.13 pm. As previously described. pressed position informaUon H is obtained in step 73Se 

?uota,^l'd\rhv JL'''''!'h'''^':- f ^IT " ^ ^'^P the dphertext of the compressed position 

S a?™cv ofVn ^^ '^P!'^ information H is constixictcd. First, in step 695. a se^t key. 

wuh an accuracy of ai3 m. that is. with aji accuracy of the j „ ,034 bits, and secret keys, p and q. of 256 or 512 

order of 0. 1 pm, but there is a possibiUtv that mass produc- w:,. „, ,„h , „ tioiu ' \* ^ • 

tion technology may be commerciaUy implemented in the WTa fiinrrnn WK^^^^^ 

AiturcthatenableslargequantitiesofsLgle-layerdiskstobe is JL^k w m i ^'L "^"^f""" " 1^ 

trimmed with a processing accuracy of 0.1 pm at low co^ m '"IT n r**" "^^aVu " " 

Even in that case'since the top and?ottom disks are trimmed r ^r c^L'of ^^^^ f th" " f H ?- T' 

ciIn•■lr'>n^/^..cK, In »k» ^^.^ «f ♦u ^ 1 I • . j J- . ^ fccorded on the optical disk. The optical disk is thus 

sunultaneously in the case of the two-iayer laminated disk completed and is shipped (step 73SA) . . 

800, the two disks must be lanunated together with the pit , ^ . ^ *^ ' 

locations and optical marks aligned with an accuracy of a 20 , ^ i*l"^P^^"c;^<'^^P^^^ 

few microns. However, it is next to impossible to laminate ^ 735m and the ciphertext C is decrypted in step 698. 

the disks with this accuracy because of the temperature 'P'^^'^^'^y- ciphertext C is recovered in step 698e. 

coefficient, etc. of the polycarbonate substrate. When optical ^""^ P"^^'' 1^""^ ^^^P ^^^P ^• 

marks were formed by applying laser light penetrating <*^^Wt^^ ciphertext C the dphertext C is raised ^ 

through the tu'O-layer disk 800. the resulting anti-piracy 25 ?t ^k"" . " '^1^'''^' '^'"^'^'^ 

mark is extremely difBcult to duplicate. This provides a P^f'"^^^^. J^e plaintext M is the compressed position 

greater anti-piracy effect The optical disk with an anti-piracy !"i ^'heck may be performed in step 

mechanism is thus completed. For piracy prevention 698^- errors, it is decided that no alterations have been 

appUcalions, in cases where the disk process and laser cut f'^f the posiUon infoi-mation. and the process proceeds 

pn^ess are inseparable as in the case of the single^plate 3G !^ ^^k^heckj-ou tine 73:, vr shown in RG. 24. U an error 

type, the encryption process, which is an integral pan of the ,T "^""^ ^^^'^^'^ ^'n^- 

laser cut process, and processing involving a secret encr>-p- '"^ *'P''''''^" '^'^PP^^' 

tion key have to be pertormed at the disk manufacturing . ^ ^^^P compressed position informa- 

factory This means that in the case of the single-plate type ^1*^" ^ expanded to recover the original position informa- 

the secret encryption key maintained in the software com- 35 ^ 736c, measurements are made to check whether 

pany have to be delivered to the disk manufacturing factory. marking is actually located in the position on the optical 

This greatly reduces the security of encryption. On the other indicated by the position information. :Id step 736^i, it 

hand, according to the method involving laser processing of checked whether the difference ber^-een the decrypted 

laminated disks, which constitutes one aspect of the Position information and the actually measured position 

invenUon. the laser trimming process can be completely 40 ^^f^^^on ^^lls within a tolerance. If the check is OK in 

separated from the disk manufacturing process. Therefore, ^^^^ process proceeds to step 736h to output 

laser trimming and encryption operations can be performed software or data or execute programs stored on the optical 

at a factory of the software maker. Since the secret encryp- ^ ^^^^^ ^^^^^^ outside the tolerance, that is. if the 

tion key that the software maker keeps need not be dcUvered P*^^^^ °^ posiUon information do not agree, a display is 

to the disk manufacturing factory, the secret key for encryp- 45 P^'^^^cd to the effect that the optical disk is an Ulegally 

tion can be kept in the safe custody of the software maker. ^"P^cated one, and the operation is stopped in step 736^. 

This greaUy increases the security of encryption. ^^^^^ reducing required capacity since only 

(2) (A) Encryption (digital signature) of marking position ^^^^^^"P^^'^^^^ "^^^^ ^ . 
information, etc. and decryption and reproduction of optical OniplementaUon by elliptic Junction) 
disk position information, etc.. which have been briefly 50 another t>'pc of signature system, that is. an imprint 
described in (l).wUl now be described in more detail. (B) ^^P^ signature system using an elliptic function for 
Various mechanism for piracy prevention will also be encryption, will be described with reference to the flow- 
described below. ^^^^ shown in FIGS. 23 and 24. 

(A) Encryption (digiul signature) and its reproduction , shown in HG. 23, etc., the process consists of the 

wiU be described *^ 55 foUowing major routines: step 735a where marking position 

Q.-f^^u rA^^.^' . X information is measured at the optical disk maker, step 735/ 

a) Sunple encryption (distal signature) ^^ere authentication ciphenext (Le.. signature) for the posi- 

(Implementauon by RSA function) tion information is computed, step 735n where position 

First, an example of encryption in which encryption is information authentication (signature verification) is per- 

perfoimcd using a function of a message recovery type go formed in the reproduction apparatus, and step 735^ where 

signature method, such as an RSA function, will be a check is made to determine whether the disk is a legitimate 

described with reference to the flowcharts shown in FIGS. optical disk or not 

^ ^' The process from step 735^ to step 735e is the same as 

As shown in FIG. 22, the process consists of the following that for the RSA function, 

major routines: step 735<j where marking position informa- 65 In step 735/. authentication ciphertext for the compressed 

tion IS measured at the cptical disk maker, step 695 where position information H is constructed. First, in step 735g. 

the position information is encrypted (or a digital signature secret keys X (128 bits or over) and K are set, and in step 
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735h. a public system parameter G. a point on an ellipse, is factory. Therefore, the softu'arc maker 9002 here is a depart- 

determined, and with f(x) as a one-direction function. R=f ment that performs the manufacturing process at the disk 

(KxG) is obtained first, and then R'=f(R) is obtained: then manufacturing factory lUustrated tn FIG. 1. in addition to the 

from equation S=(KxR'-H)X"' mod Q. R and S as authen- production of software. That is, when manufacturing optical 

licalion ciphertext arc generated. In step 735;, the authenii- 5 disks of movie software, encryption for prevention of illegal 

cation ciphertext R and S and the plaintext H of the duplications is also performed. To accomplish the 

compressed position information are recorded on the optical encr>ption. the software maker 9002 obtains an exclusive 

disk, and in step 735L the completed disk is shipped. sub seael key from the key management center 9001. The 

In the reproduction apparatus, the optical disk is loaded in above has described the arrangement at the optical disk 

step 735m. and an authentication q)eration is performed in 10 maker side. 

step 735rt to authenticate the position information. On the other hand, there is a player 9004 at the user side 

First, in step 735/?, the authentication ciphertext R and S where the optical disk is used. The player 9004 is an 

and the compressed position information H are recovered apparatus for reproducing an q)tical disk, and contains a 

from the loaded optical disk. In step 735r, public keys Y, G, ^OM in which is preslored a master public key correspond- 

and Q are set, and in step 73Si. an authentication operation ing to the master secret key maintained at the key manage- 

is performed whereby f(AxY+BxG) is obtained from "^^nt center. A function to slop the reproduction of an 

A=SR~^ mod Q and B=:HR'* mod Q. In step 735r. it is illegally duplicated optical disk is also incoiporated. 

checked if the above value matches R, If they match, it is Having described the general arrangement, we will now 

decided that no alterations have been made to the position describe the operation, 

information, and the process p-oceeds to the optical disk ^ (b-1) First, the processing steps for encryption performed 

check routine 735w in FIG. 24. If they do not match, it is at the software maker 9002 will be described, 

decided that the data is not legitimate one. and the operation The eaciyption step first pcrfonned (the first enciyption 

IS stopped. st^p) involves encryption at the stage of disk mold 

The subsequent process from step 736a to step 736g is the manufacturing, and the encrypted information is reflected in 

same as that for the RSA function. That is, if the optical disk the shape of the disk mold. The encryption step performed 

is judged as being an illegally duplicated one, a display to finaUy (the second encryption step) concerns encryption 

that effect is produced, and in step 736^. the operation is performed at a stage after the formation of a marking by 

stopped. Compared to the RSA function, the elliptic function laser trimming. 

has the advantage that the compulation time is short, which (M) in the first encryption step, enco'ptio" is performed 

serves to reduce the time before the reproduction starts. This using a sub public kev correspondins to the sub secret kev 

system therefore is suitable for application to consumer to be used in the second encryption step, and using 'a 

reproducuon apparatus. software feature information and anti-piracy identifier. The 

(b) Complex encryption (digital signature) using master information is transferred to the key management center 

key. subkey. etc. 9001 via the communication line 9003. The software feature 

Not only the marking position information but informa- information refers to the information describing the contents 

lion concerning the features of contents of the software of the movie software written on the optical disk, and it is 

stored on the optical disk and an anti-piracy identifier are unique to each movie software and is different from one 

subjected to encryption (digital signature). Furthermore, two software to another. The anti-piracy identifier is provided to 

kinds of encryption keys, master key and subkey, are used. make it possible to detect whether the manufactured optical 

A specific example is described below in which a secret key ' disk is processed with piracy prevention. The identifier of an 

encryption function is used in combination with a public key optical disk processed with piracy prevention using second 

enciyption function. ciphertext is "1"; otherwise, the identifier is **0". In this 

Before procecdiiig to a detailed description of the specific example, the identifier is needless to say. 

example, a basic ftjnciional description of this system will be ^5 (1-2) The key management center 9001 encrypts the 

given first with reference to FIG. 40 to facilitate understand- information transferred from the software maker 9002. by 

ing of the basics thereof. using the master secret key maintained at the center, and 

In the example treated in the following basic description, sends the encrypted information back to the software maker 

encryption is performed using a public key encryption 9^^^- The thus created ciphertext is referred to as the first 

ftjncticn, and encryption using a secret key encryption 50 ciphertext. 

function is not treated here. Therefore, the master seaet key ( 1-3) The software maker 9002 records the first ciphertext 

for public key enciyption and the sub secret key for public on the disk mold (or master) along with the movie software, 

key encryption are simply referred to as the master secret etc. 

key and sub secret key. respectively. Likewise, the master (1-4) The software maker 9002 molds disks by using the 

public key for public key encryption and the sub public key 55 thus completed mold. 

for public key encryption are simply referred to as the master ' (1-5) Next, the software maker 9002 fabricates optical 

public key and sub public key. respectively. disks from the molded disks, and performs the laser 

As shown in FIG. 40. a key management center 9001 trimming, as previously described, to form a marking on 

securely manages the master secret key to maintain its each optical disk. 

secrecy, and is linked to a software maker 9002. to be 60 (1-6) Further, the software maker 9002 detects the posi- 

descnbed later, via a conmiunication Une 9003. When a tion of the marking and encrypts the obtained position 

lequest for encryption is made from the software maker information by using the sub secret key maintained at the 

9002, the key management center 9001 receives data, to be maker. The thus encrypted information is referred to as the 

encrypted, via a network 9003 and encrypts the data using second ciphertext. Since it is created by encrypting the 

the master secret key 55 position information, the second ciphertext is different from 

For simplicity of explanation, it is assumed here that the one optical disk to another even if they are pressed from the 

software maker 9002 also includes a disk manufacturing same mold. This is the difference from the first ciphertext. 
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(1-7) Finally, the software maker 9002 records the second WTien a system is employed that uses secret key encryp- 

aphertext as a barcode on the optical disk. The optical disk tion in combmauon with public key encryption, a master 

IS thus completed. secret key for secret key encryption is used in step 866c. 

(b-2) Ne-\t, we will describe the operation when the user encr^'ption is performed in step 866i/. and the data is 

who purchased the thus completed optical disk plays it back 5 recorded on the master disk 867 in step 866^. 

on the player 9004. Xhe disk mastering process is thus completed. The ami- 

(2-1) First, the player 9004 reads the first ciphertext piracy identifier 865 recorded on the master disk defines 

recorded on the optical disk, and using the master public key how the copyright of the software should be protected, and 

stored in the ROM, decrypts the first ciphertext which consists of at least four bits of copyright protection flags, 

contains in encrypted form the sub public key corresponding ^° including a flag of one bit to indicate whether the software 

to the sub secret key, the software feature infOTmation. and is equipped with an anti-piracy mechanism, a flag of one bit 

the anti-piracy identifier. to indicate whether it contains a low reflectivity barcode 

(2-2) In the meantime, the player 9004 extracted the portion, a flag of one bit as a scramble identifier 965a to 

software feature information from the contents of the movie indicate whether the software is scrambled or not. and a flag 

software recorded on the optical disk. The extracted soft- of one bit to indicate whether software dubbing is prevented 

ware feature information is compared with the software or not. Since the anti-piracy identifier 865 and the sub public 

feature information obtained by decryption in (2-1); if they combined with the software feature information 

do not agree, the optical disk is judged as being an illegally 863 unique to the software and are encrypted together by 

duplicated one. and the subsequent reproduction operation is "^'^^S *e master secret key for public key encryption, it is 

stopped. If they agree, the process proceeds to the next step. not possible to alter them. 

(2-3) It is checked whether the anti-pirac>' identifier The anti-piracy identifier 865 and the sub public key 861 

obtained by deayption in (2- 1) is "1" or '^0". If it is "0", the are combined with the software feature inforniation unique 

reproduction operation is immediately started, skipping the to the software, into one data block which is then encr>'pted 

process hereinafter described. If it is "1". the process further ^ by the secret key. 

continues. - if ^j^e software feature information 863 consists of 256 

In this manner, if the optical disk happens to be a disk not bits, there are 2256 possible variations. This means that 

processed with the piracy prevention using the second when software feature information is extracted from data 

ciphertext, the disk can be reproduced on the player 9004 as obtained by authoring a particular movie software product, 

long as its identifier is set to "0" in a legitimate way. If a the probabaii>' that it coincides with sofhvare feature infor- 

pu-ate attempts to make an iUegal copy by altering the matioa of some other software is •/2256; therefore, the prob- 

identifier to "0", his effort wiU be thwarted because the ability of such coincidence occurring is almost zero. When 

identifier is encrypted using the master secret key after being a one-direction hash hmction. such as MD5 or SHA. is used, 

combined with the software feature information, etc.. as if the hash value, i.e.. the sofnvare feature information 963^ 

earlier described. consists of 256 bits, finding two software contents having 

(2-4) First, the second ciphertext recorded on the optical the same hash value will require 1018 years of coraputtjig 

disk is read out. Then, the second ciphertext, which is the time using a currently available large computer, 

encrypted version of the position information, is decrypted ConsequenUy. it is nearly impossible to replace software, 

using the sub public key obtained by decryption in (2-1). For the software feature information of a particular software 

(2-5) Using the decrypted posldoa information, it is 40 Product authored, only one value exists, and no other 

checked whether the marking is aaually formed in the software can have the same value. 

position on the optical disk indicated by the position infor- Since the soft^vare feature information is encrypted jointly 

mation. Then, the actually measured marking position infor- with the anti-piracy identifier 865 and the sub public key 

nation is compared with the position information decrypted 861, neither of these tu'o values cannot be altered. Thus, 

in (2-4). If they do not agree, the optical disk is judged as 45 after authoring, the anti-piracy identifier 865 and the sub 

being an illegally duplicated one. and the reproduction public key 861 for a particular software product are uniquely 

operation is stopped. If they agree, the optical disk is judged identified. 

as being a legiiiniale one, and the reproduction operation is The recording of the anti-piracy identifier 865 on .the 

^^^^ master disk will be described in further detail. 

An outline of the system has been described above. Now. 50 How the anti-piracy identifier 865 is actually appended to 

a descnption w,U be given m more specific form. software is at the discretion of the copyright owner of the 

As shown m FIG. 32. software feature extracting means software. It takes cost and labor to apply an anti-piracy 
864 extracts the software parameters unique to the software. measure to optical disk software. Accordingly, not aU optical 
such as theTOC information showing the time organization disks are equipped with an anti-piracy mechanism; some 
of each chapter of the video software, image compression 55 optical disks incorporate an anti-piracy mechanism or the 
parameters, the tide name. etc. from the contents of the barcode of the present invention, while others do not If 
software, and compresses the extracted information to 128 legitimate disks having no anti-piracy mechanism or bar- 
bits to 256 bits by the computation of a checksum, the code are allowed to exist, reproduction apparatus are 
computation of a Galois field, etc.. and a one-direction hash required to have a function that enables both types of disk to 
ftinction 864a such as SHA and MD5. to create software 60 be reproduced property. In that case, when reproducing a 
feature information 863. The software feature information disk having no piracy protection, two possibilities must be 
863 IS then combmed with a sub public key 861 special to considered: one is that the disk is a legitimate disk for which 
the software maker and an anti-piracy identifier 865 as a the software companv has unlocked the piracy proteaion in 
copyright Identifier, into one data block which is then a legitimate way. and the other is that the disk is a disk which 
cncryptoi in steps 866a and 866^ using a master secret key 63 the software con^anv has produced with piracy protection 
for public key encryption and is recorded on a master disk but whose anti-piracy identifier has been Ulegally altered by 
867 in step 866e. along with the software proper. a pirate. 
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Means for identifying whether the anti-piracy identifier is 
legitimate or not is therefore important. 

In the present invention, the anti-piracy identifier 865. 
including the anti-piracy identifier, is encrypted together 
with the software feature information by using a secret key, 
and recorded in a ciphcrtext recording section on the master 
disk. The reproduction af^arams decrypts the ciphertext 
with a prescribed public key. This prevents illegal alterations 
from being made to either data. 

The only way left to pirates is to replace the whole portion 
of the fijst ciphertext. which contains the software feature 
information 863 and the anti-pirac>' identifier 865. by dif- 
ferent one. 

To distinguish the software feature information 863 from 
the software feature information extracted from the movie 
software actually written on the optical disk, which will be 
described later, the former may sometimes be referred to as 
the first software feature information, and the latter as the 
second software feature information. Both kinds of infor- 
mation are the same in that they relate to the contents of the 
same movie software, but different in that the former is 
UTitten in encrypted form at the time the optical disk is 
manufactured, while the latter is extracted by examining the 
contents of the actually recorded movie software at the time 
of reproduction. 

Since the first software ioforniation 863 has a value 
unique to the software for which the authoring is completed, 
the probability of some other software yielding the same 
value is V2256. which is approximately zero, as earlier noted. 
If the first software information 863 is replaced, the infor- 
mation no longer agrees with the second software feature 
information 885 actually extracted from the disk in step 
876e in the process of the check routine of FIG. 38 per- 
fomied in steps 876a. 876c, 876e. and 876/ This prevents 
the disk with altered information from being played back. In 
this way, the anti-piracy identifier 865 of the softu'are and 
the sub public key hereinafter described are protected 
against illegal alterations. An illegal manufacturer, who is 
thinking of making illegal disks by copying the software 
from a legitimate disk, may therefore consider making disks 
that do not have either the anti-piracy identifier or the 
barcode. In that case, the anti-piracy identifier in the anti- 
piracy identifier 865 would have to be changed from ON 
("i") to OFF ("0") setting. To change the setting, however, 
it is necessary to have the key management center issue the 
first ciphertext encrypted with the master secret key shown 
at step 866a in FIG. 36. but normally, measures are in effect 
to prevent the key management center from issuing it to an 
unauthorized person, thus preventing illegal alteration of the 
anti'piracy identifier 865. 

That is, the first software feature information 863 and the 
anti-piracy identifier 865 are encr>'pted together into the first 
ciphenext 886 for recording on the master disk. This has the 
effect of thwarting any anempt by a pirate to make illegal 
copies of piracy-protected software in the disk format of no 
piracy prevention without an anti-piracy mark or mecha- 
nisHL With this method that constitutes one aspect of the 
invention, if a disk standard is worked out, allowing the 
existence of disks without piracy protection along with disks 
with piracy protection, and if the standard is replaced by a 
new-generation standard, reproduction apparatus of the new 
generation can achieve piracy prevention against all disks. 
This is a big practical advantage. 

The necessity of the master secret key and sub secret key 
in secret key of a public key encr>'ption and the construction 
and ftinctions of these secret keys will be described in detail 
below. 
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In the piracy prevention method of the invention, the 
secret encryption key need not be delivered to the disk 
manufacturing factory since secondary recording can be 
done. However, it is not reaUstic to have an encryption 
5 center create ciphertext for each of the disks manufactured 
throughout the world and to receive the ciphertext via a 
network, because this would cause an enormous increase in 
communication trafiBc. On the other hand, distributing the 
secret key to each software maker and disk manufacturing 
10 factory is not possible from the viewpoint of security. A 
method that can overcome this problem is therefore needed. 

As a method to overcome this problem, the present 
invention provides the master key/subkey system. Accord- 
ing to the present invention, the key management center (key 
15 issuing center) keeps the master secret key which is not 
disclosed to the outside. On the other hand, the software 
company keeps the sub secret key with which the company 
maintains the security of its software on its own responsi- 
bility. As already described with reference to FIG. 32, the 
^ software feature information and die sub public key the 
software company keeps are jointly encrypted, using the 
master secret key. into the first ciphertext. The reproduction 
apparatus decr>'pts the first ciphcrtext by applying the master 
public key. and extract the sub public key from the decrypted 
25 text. This prevents illegal alterations from being made to the 
sub public key that becomes necessary to decrypt the second 
ciphertext. i.e.. the encr>pted version of the marking posi- 
tion information. 

This means that a particular software product can only be 
encr>'pted using a particular secret key. that is. the software 
maker's secret key corresponding to the sub public key. 
Using the sub secret key. the softw are maker can set the key 
on software locked or unlocked at their option. 

This in turn means that pirates cannot produce pirated 
disks unless they steal the sub secret key information unique 
to the software from the software maker. 

In FIG, 32. the software maker combines disk physical 
position information 868 and disk ID 869. and encrypts them 
40 togetiier by using the sub secret key 876 in step 866/ to 
construct a public key cipher 859 which is recorded on the 
optical disk 800 in the form of a barcode. This permits the 
software maker to produce piracy-protected disks without 
having to have the master secret key 866a. The effect of this 
45 is to protect the security of the master secret key. If the sub 
secret key is stolen and pirated disks are produced, the 
damage is limited to the software for which that sub secret 
key was issued. When the software maker issues a new sub 
secret key and sub public key. production of pirated disks of 
50 the software thereafter can be prevented. FIGS. 36 and 37 
are general system diagrams showing data flow. 

In operation. FIG. 36 is the same as FIG. 32, and detailed 
explanation will not be given here. In FIG. 36. the software 
company 871^ first sets its own sub secret key 876. and 
55 computes the sub public key 861. The sub public key 861 is 
combined with the software feature information 861 of the 
software to be recorded, and transmitted to the key issuing 
center 872 via a network such as the Internet. The key 
issuing center 872 encrypts the combined signal with the 
60 master secret key 866a and sends back the encrypted master 
public key 858 to the software company. The software 
company combines it witii the software, and sends the 
combined signal to the disk manufacturing factory 873 
where it is recorded on the master disk 867 from.which the 
65 disk 800 is produced. Referring next to FIG. 37, the software 
company S71b forms a marking on the disk 800. reads the 
marking position infoiraation. encrypts the position infer- 
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matioQ with ihe sub secret key 876 corresponding to the sub 
public key, and, using a pulsed laser 813, records the 
encrypted information on the disk 800i? in the form of a 
barcode. A detailed description of the recording operation 
has already be given and will not be repeated here. 

Next, the anti-piracy operation in the reproduction 
apparatus, when reproducing the thus connpieted optical 
disk, will be described in further detail with reference to 
RG. 38. 

The operation consists essentially of a software check step 
874 and a disk check step 875. In the software check step 
874, first the first cipheitext is reproduce from the disk 800 
in step 87do. and then, using the master public key stored in 
the ROM in the reproduction apparatus in step 876c, the first 
ciphertext is decrypted into plaintext in step 8766. In step 
876J. the plaintext of the first software feature information 
863 and sub public key 861 is obtained, and in step 876/, it 
is checked against the second software feature information 
extracted using the one-direction hash function. If the check 
is NG in step 876g. the operation is stopped; if the check is 
OK. the sub public key is output in step 876/i. If alterations 
have been made to the sub public key or software anributes 
by a pirate, the lu'o kinds of information do not agree, so that 
the reproduction of an illegal disk is prevented. The legiti- 
mate sub public key is thus obuined at the reproduction 
apparatus. 

In the disk check step 875. the sub public key is input in 
step 876A:. and the second ciphertext, i.e.. the public key 
cipher 859 (see FIG. 32). is reproduce in step 876m. In step 
.876/1. the second ciphertext is decrypted into plaintext by 
using the sub public key. and in step 876/?. the niarking 
position information is obtained. In this case, the marking 
position information cannot be altered illegally unless the 
sub secret key 876 (see HG. 32) corresponding to the sub 
public key is leaked out. In step 876/?. the actual position of 
the marking formed on the disk by laser is read, and in step 
876r. this position is checked. If the result is NO in step 
876j. the operation is stopped in step 876/, producing a 
display *%ated Disk". If the result is YES, the reproduction 
operation is allowed to continue in step 876^. 

With the above construction, illegally duplicated disks 
cannot be reproduced on the reproduction apparatus unless 
the sub secret key maintained at the software maker is stolen 
OT unless the nonreflective marking portion is laser-trinuned 
with an accuracy of subraicrons, for example. 0.13 jim, and 
two disks are laminated together with an accuracy of the 
order of a few microns. This makes it virtually impossible to 
make pirated disks. This has the effect of preventing pirating 
of disks. 

(c) Detailed description of an example using a public key 
encryption function in combination with a secret key 
encryption function 

A first feature of the encryption system of the present 
invention is the use of two encryption functions, a public key 
encryption function and a seaet key encryption function, 
when encrypting marking position information, etc. on each 
optical disk. 

The following description deals with problems encoun- 
tered when actually implementing a piracy prevention 
method that uses public key cipher, and also deals with a 
method of implementation. The public key cipher here refers 
to the position information encrypted using a public key 
encryption function (for example, an RSA function). 

From the security point of view, it is desirable that all 
rciM-oduction apparatus be equipped with a public key cipher 
decoder to decode the anti-piracy public key cipher of the 
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present invention. However, processing a 512-bit public key 
cipher requires 0.3 seconds using a 32-bit. 50-MHz CPU. On 
the other hand, the DVD player control IC predominant in 
consumer apparatus today is an 8-bit one-chip microcom- 
5 puier. With this CPU. it will uike more than a few minutes 
to process the public key. This means that the user has to 
wait a few minutes before an image is reproduced from a 
DVD. This poses a problem in employing the public key 
cipher system in consumer products. 
'0 Since, at the present level, public key cipher cannot be 
processed by the CPU used in consumer products, for the 
present there is no option but to use a secret key cipher 
decoder for consumer reproduction apparatus because it 
requires a small amount of processing time. However, in the 
5 case of secret key cipher, since the secret encryption key can 
be easily deciphered from cipher decoder information, the 
secret key cipher will lose its anti-piracy effect once deci- 
phered. Therefore, transferring to public key cipher which is 
difiScull to decipher is imperative in the future. 
° Secret key cipher and public key cipher are mutually 
incompatible. If the system were simply switched from 
secret key cipher to public key cipher in future, second- 
generation optical disks having public key cipher would not 
^ be able to be decoded and reproduced on a first-generation 
^ player having a secret key cipher decoder. Furthermore, 
first-generation optical disks having secret key cipher would 
be unable to be reproduced on a future player. If the player 
is constructed to allow the reproduction of such disks, it will 
^ allow pirates to decipher the secret key for the secret key 
cipher and create the secret key cipher using the deciphered 
key. thus giving rise to the possibilit>' of pirated disks being 
marketed in large quantities. If disks encrypted with secret 
key are allowed to be reproduced on future players, piracy 
^ cannot be prevented even if public key cipher is used. 
The need therefore arises for a mechanism which, if the 
cipher decoder of reproduction apparatus is changed from 
the secret key to the public key system in the future, can 
preserve compatibility to allow earlier optical disks to be 
reproduced properly on reproduction apparatus having a 
new public key cipher decoder while preventing the repro- 
ducing of pirated disks. 

A method of the invention that satisfies the need for 
compatibility is disclosed hereinafter. As shown in RG. 39. 
45 the optical disk of the invention has both a secret key cipher 
recording portion 879 and a public key ciphertext recording 
portion 880. The manufacmring method will be described 
later with reference to FIG. 29. First, when reproducing the 
optical disk of FIG. 39 on a first-generation reproduction 
50 apparatus equipped with a secret key cipher decoder 881. the 
first physical feature information (corresponding to the 
enCTypted version of the position information) unique to the 
legitimate disk is read from the secret key cipher recording 
portion 879 on the disk, and decrypted by the secret key 
55 cipher decoder 881 into plaintext. Further, the second physi- 
cal feature information (corresponding to the measured 
position information) of the disk is measured, and the two 
kinds of physical information are compared. 
In the case of a legitimate disk, the disk is normally 
60 reproduced since the two kinds of physical feature informa- 
tion agree, as shown in step 878a. 

In the case of a pirated disk, since they do not agree as 
shown in step 878c. the reproduction of the disk is pre- 
vented. That is. the reproduction is prevented as long as the 
65 secret key cipher remains unbroken. If it is broken some 
time in the future by a pirate, as earlier described, the pirate 
can produce illegal disks in large quantities by illegally 
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creating the secret key cipher. In that case, since the secret 
key decoder 881 in the first-generation reproduction ^pa- 
ratus checks only the seaet key cipher, the comparison 
checks OK as shown in step 878^. allowing the illegal 

pirated disk to be reproduced. However, by that time in the 
future, second-generation reproduction apparatus having a 
public key cipher decoder 882 will have become a predomi- 
nant type; therefore, reproducing pirated disks on the first- 
generation reproduction apparatus in an illegal manner will 
not have a significant impact. 

Since the legitimate disk of the invention has public key 
cipher, the disk is normally reproduced on the second- 
generation reproduction apparatus, as shown in step 8786. 
On the other hand, when a pirated disk is inserted for 
reproduction, the reproduction apparatus checks only the 
public key cipher, as shown in step 878f. whether the secret 
key cipher is deciphered or not. As a result, the anti-piracy 
function of the public key cipher works, as shown in step 
87Se. so that the reproducing of the pirated disk on the 
second-generation reproduction apparatus is almost per- 
fectly prevented. 

According to the invention, all disks are manufactured 
with both the secret key cipher 879 and public key cipher 
880 prewritten thereon from the tiitie of conunercial intro- 
duction of the first-generation reproduction apparatus. 
Therefore, in the first stage, piracy prevention at the secret 
key cipher level is provided since the ciphertext can be 
processed by the 8-bit microcomputer mounted in the first- 
generation reproduction apparatus. In the second stage, that 
is. in the future when the secret key cipher may have be 
broken, more sophisticated piracy prevention can be pro- 
vided by the public key cipher decoder incorporated in the 
second-generation apparatus which will have become the 
predominant type by that time. In this way. if one generation 
is replaced by the next generation, perfect compatibility with 
earlier media can be preserved uninterruptedly with the 
second- generation reproduction apparatus achieving nearly 
perfect piracy prevention. 

The above has described an example of application to the 
low reflectivitN' marking method, that is, the piracy preven- 
tion method at the reflective layer level, but it will be 
sqjpreciated that the eflFect of preserving compatibility at the 
time of generation change can also be obtained if the same 
is applied to the piracy prevention method at the master disk 
level that uses the physical feaUire information of the master 
disk as shown in FIG. 13. 

The above-illustrated example has the feanire that, when 
performing encryption, the same information is encrypted 
by using a public key encryption function and a secret key 
encryption function separately, and the respectively 
encrypted versions of the information are recorded on the 
disk. 

Accordingly when a transition is made in funire from the 
current player equipped with a decoder, based on an 8-bit 
microcomputer, for decoding the ciphertext created using a 
secret key encryption function to the future player equipped 
with a decoder, based on a 32-bit microcomputer, for decod- 
ing the ciphertext created using a public key encryption 
function, the optical disk as described in the above example 
can be used effectively on either type of player. 

(B) Other mechanisms will be described. 

(a) We will describe another specific exanople of the 
public key/secret key combination type in which the soft- 
ware feature information. ID number, and marking position 
information are encrypted (sec FIG. 29). The ED number 
refers to the number assigned to each disk for identifying the 
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disk. The disk ID (also called the disk ID number) to be 
described later is the same in meaning to the ID nimiber. 
Major differences between the present example and the 
foregoing specific example (see FIGS. 32. 36. and 37) are: 

5 (1) In the foregoing specific example, the software feature 
information is written on the master disk as the first 
ciphertext and the marking position information is 
written on a pressed disk as the second ciphertext. 
while in the present example, the software feature 
10 information, the ID number, and the marking position 
information are all combined together for encryption 
and the encrypted text is written on an already pressed 
disk; (2) In the foregoing example, two-stage encryp- 
tion is performed using the master seaei key and sub 
IS secret key. while in the present example, encryption is 
performed only with master secret key without using a 
key corresponding to the sub secret key. 
More specifically, as shown in FIG. 29. the above com- 
bined signal is encoded in a secret key encryption section 
20 832 by using a secret key 834 for secret key encryption. The 
same combined signal is also encoded in a public key 
encryption section 831 by using a secret key 833 for public 
key encryption. In this way. public key cipher is used in 
conjunction with secret key cipher. This overcomes the 
25 problem that the ciurent reproduction apparatus can only 
decode the secret key cipher because of the slow processing 
speed of its microcomputer. Future reproduction apparams 
will use a higher- speed microcomputer, for example, of 
32-bit configuration and performs a piracy check by decod- 
30 ing only the public key cipher having a higher degree of 
secarit>'; therefore, piracy can be prevented almost perfectly. 
If the secret key cipher is broken some time in the future, 
since the public key-type player will be the predominant 
type by that time, substantial prevention of piracy can be 
35 accomplished. By recording the public key cipher simulta- 
neously with the secret key cipher on the media, if a 
transition occurs from die current generation to the next- 
generation player, the media can be reproduced on repro- 
duction apparatus of old generation while substantially 
40 achieving piracy prevention. 

(b) Next, a modulation recording method for barcode will 
be described in detail with reference to the same figure. 

In FIG. 29. a barcode recording apparams (PWM record- 
ing apparatus) 845 is used to write the encrypted information 
45 onto the disk. 

First, information concerning the position of the nonre- 
flective portion 815 formed on the reflective layer 802 or on 
the second reflective layer 825 is delected using optical mark 
position detecting means 600, The method of detection has 
50 already been described with reference to FIG. IS, etc., and 
therefore, explanation will not be repeated here. The optical 
mark position information, the software feature information 
and the ID number generated by ID generatcx- 546 are 
combined by combining means 830, The software feature 
55 information is obtained by feature-extracting from a part of 
the software contents using a one-direction hash function 
such as SHA, and by obtaining a hash value of 128 bits or 
160 bits. The ID number generator 546 has akeady been 
described with reference to FIG. 14. and therefore, expla- 
60 nation will not be repeated here. In the encryption section 
830. the combined signal of the physical feature information 
is encoded in the public key encryption section 831. such as 
RSA. by using the secret key 833 for public key encryption. 
The above public key cipher and the secret key cipher are 
65 combined in a combining section 835, and are afferted with 
interleaved/Reed-Solomon error corrections by a Reed- 
Solomon encoder 838 and an interleaver 839 in an error- 
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correcting encoder 837 of a recording circuit 836. The recording/reproduction circuit by a PWM (PIM) 

interieavc length in this case is so set as to be able to correct modulation/demodulation laser. 

a burst error due to a disk scratch 2.38 ram or longer, the (d) Another soccific example of disk raanufaauring is 

same level as the CD. thereby resulting such effect to shown in RG. 35. That is. in process (3) of HG. 35, which 

provide error correction of eirors in the barcode recorded 5 shows another application of the disk, information of 

data of the invention against a disk scratch thai may be scrambled MPEG video sisnal or the like is recorded on a 

caused in the worst condition in consumer use. disk 844c. A brief operational description of MPEG scram- 

The pnnciple of the pulse width modulation method wiU bling will be given below. An MPEG compressed video 

be descnbed with reference to the same figure. This method signal is split between a variable-length encoder for AC 

eliminates the need for the first ciphertext by the master lo components and a fixed-length encoder, each containing a 

secret key and the second dphertext by the sub seael key. random number adder, for scrambling. In the present 

In this method, the software feature information, the posiuon invention, a descrambling signal is encrypted by an encryp- 

uiformation, and the ID number are combined together for lion encoder using a one-direction funcUon. Further, a 

encryption. Billions of ROM disks are produced annually. portion of a compression program in an image compression 

Therefore, there is a possibility that a disk that happens to i5 controUer is compressed by the encr/ption encoder. This 

have a marking whose position pattern is very easy to makes it difficult for a replicating company to exchange the 

dupUcate may be produced. A pirated disk could be pro- encryption encoder with an iUegal one. Accordingly, only 

duccd by using a combination of this easUy duplicatable legitimate disks are decrypted with sub public key. 

marking position informau'on and the legitimate ciphertext Referring back to HG. 35. we wiU describe next how the 

of this position information. In FIG. 29. the position infor- 20 disk S44c manufactured in die above process (3) is pro- 

mation is combined with the software feature information cessed in the next process (4) and later processes, 

for encryption or for authentication by signamre. The posi- That is. in process (4) of FIG. 35. using a master secret 

tion information is therefore inseparable from the softu'are key tiie software company encrypts the disk ID number and 

feature information. This means that if an easUy dupUcatable a sub public key for decoding the descrarabUng signal, and 

mark happens to be produced, it is only possible to produce 2S secondary-records the encrypted text by barcude on the disk, 

puated disks having corresponding software contents, so thus completini^ the disk 844/: Since the disk 844/ are 

that potential damage will be greatly limited. It will be scrambled, the disk cannot be reproduced as is. The disk ID 

rccogmzed here that this ciphertext may be recorded on the number mentioned here is the same in meaning as the 

master disk. previously described ID number. In process (5). after receiv- 

The error-correction coded signal is modulated into a 30 ing money for the disk from a customer, the dealer generates 

PWM signal by a pulse interval modulator 840, When a password by usim; the disk ID number with the sub secret 

describing lines by using a laser, it is difficult to construct a key conrespondina to the sub pubUc key, and tertiary-records 

barcode by accurately controlling the line width. Therefore. the password on"' the disk. Once the password has been 

in the present invention, die pulse interval is classified into recorded, the disk S44g can be reproduced on a reproduction 

four values IT. 2T. 3T, and 4T. as shown in FIG. 30. and by 35 apparatus by descrambling the data. In the case of a com- 

encodmg marks 843i>. 843c. 843J. and 843e as 00. 01, 10. puter program, the program can be instaDed. With this 

and 11. for example. 2-bit data can be transmitted with one method, if someone shopUfis a disk, images or software on 

barcode. As shown m a table 842 showing the relationship the disk cannot be reproduced since image scrambUng and 

between Une width and recording rate in HG. 30. when ciphertext are not unlocked. This defeats the efifort of a 

recording a PIM barcode in a lead-in area of the ROM disk 4G shoplifter, and thus has the effect of preventing shoplifting 

800 with Une width 10 pm. it can be seen that 5.6 kbits of (e) We interrupt here our explanadon relating to FIG, 35 

infonnation can be written additionaUy on the completed and refer back to HG. 21 to describe the operation and 

disk in one revolution. configuration of a reproduction apparatus incorporating a 

Part (DofHG. 31 shows a nonreflcctivcpOTdon detection recording circuit, as shown, concentrating on magnetic 

^'^ru * • recording and reproduction circuits which in combination of 

The signals have a synchronizing signal area 858. con- an optical reproduction apparams constitute a recording/ 

sisting of three pulses 857fl,857i., and 857c with internal T; reproduction circuit. In FIG. 21. a combination of the 

this area indicates the starting posidon. This is followed by magnetic recording and reproduction circuits, and optical 

a blank of 4T which is a reference time area for measuring reproduction apparatus is shown, but instead, a combinatibn 

reference time T. When the line width is 10 pm, T=20 Mm. 50 of an ordinary optical reproduction apparatus and a floppy 

Next comes a first recording area 860 of about 1 kbits for disk drive may be used. 

holding secondary-recorded data. Then, preceded by a blank In the figure, the magnetic reproduction circuit has two 

861fl of 100 pm OT greater length, there is recorded a second demodulators, an MFM demodulator 30d and a second 

recording area 862fl for tertiary-recorded data. A password demodulator 6b2(sic) which is another type to MFM. one or 

for descrarabUng. etc. are recorded at a dealer. 55 the other of which is selected by a selector 661. The 

(c) The following describes the method of use of the corresponding modulator is kept only at the factory so that 

barcode which can secondary- and tertiary-rccord by die a ftiU recording capability is not provided although repro- 

duction is possible. Accordingly, when a speciaUy modu- 

As shown m HG. 35. m process (2), die software maker lated area was recorded at the factory, a specially modulated 

may produce a disk 8446 on which Uie ID number unique to 60 signal is not recorded. CPU 665 on the drive side performs 

die disk and a j^vaie key used for secret communication control so that no recording can be made unless die specially 

widi a user are recorded. The disk 844c. 844<f can be modulated signal is reproduced from this area. Therefore it 

reproduced widiout requiring any special procedure. can be said diat this area is a logical write-once area. 

As shown in HG. 21 to be described later, a recording/ permitting recording only once. Accordingly, once the 

reproduction circuit implementing the HMST mediod of die 65 machine ID. such as a drive ID 699a recorded in a ROM 699 

invention can be constructed by replacing an MFM in die reproduction apparatus, has been recorded in this 

modulation/demodulation magnetic head in a magnetic write-once area of a magnetic recording portion on an 
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optical disk or a floppy disk, the user drive cannot alter the 
recorded contents, thus preventing illegal installation on 
more machines than a pcrraitted number of machines. The 
drive ID mentioned here is a number assigned to each 
reproduction apparatus for identifying the apparatus. The 5 
machine ID may be an ID assigned to a personal computer. 
A netwOTk interface section 14 examines an HDD, etc. on a 
second personal computer 663 connected to a net^\'o^k 664 
and supervises the operation so that the program of the same 
drive ID or same machine ID will not be started or nin, thus lO 
preventing the use of illegally copied software. 

The laser marking recording method of the invention 
permits secondary recording such as recording of a dealer 
code at a dealer, as does a magnetic method. This, however, 
does not constitute a feature of the present invention, and i5 
therefore, detailed explanation will not be given here. 

Id the case of a rental video store, if a password were 
recorded permanently on a disk, and if the disk were 
slioplifted. the shoplifter could play back that disk To 
prevent this, a rental video store hands a scrambled disk 844/ 20 
to a customer, as shown in process (6). In step 851^. a 
password for descrambling is computed from the disk ID or 
tlie drive ED described later by using a sub secret key. In step 
85 i/. the password is printed on the receipt which is handed 
to the customer. The password may be nolined to the 25 
customer by telephone, as shown in step 85 1«. 

The customer performs the descrambling operation 
shown in step 85 Ir on his reproduction apparatus in his 
home. First, in step 8515, the scramble identifier and the 
software feature information are decrypted from the cipher- 3C 
text by using the sub public key. The decrypted software 
feature information is compared with the software feature 
information that was actually extracted from the software 
contents by using a one-direction hash function, to verify 
whether they agree or not. If verification cannot be done, the 35 
disk is regarded as an illegal one. and the reproduction is 
stopped. If the scramble identifier is OFF in step SSlx. the 
reproduction operation is permitted in step HSlp. If the 
scramble identifier is ON. the user enters a password from 
a numeric keypad in step 85 U, and the password is com- 40 
puted using the sub public key. In step 851r. a further 
computation is performed using the disk ID and/or drive ID. 
and only when the result of the password computation 
agrees with the disk ID or drive ID. the scramble or 
ciphertext is unlocked to permit reproduction or operation 45 
for a prescribed number of days. When the disk has been 
rented out with a password only for a portion of the software 
to the customer, if the customer desires to view odier items 
in the software, the customer can request by telephone the 
key issuing center to issue the password for the desired 5o 
software item; the password is then notified to the customer 
in step 851u and input in step 85U to enable the desired 
software on the disk to be reproduced. 

The operation performed at the video retail store or rental 
video store in processes (5) and (6) in FIG. 35 will be 55 
described in further detail with reference to FIG. 34. The 
video retail store receives a scramble- or encryption-applied 
disk 844/. and after confirming payment from the user, 
transmits the disk ID number and sub public key data of die 
disk 844/ from a barcode recording/reproduction apparatus 60 
845 to a password issuing center 852 via a PCS terminal 
846. In the case of a small shop system, the password issuing 
center, that is. the system containing the sub secret key for 
the sub public key. may be contained in the PCS terminal. 
The password issuing center inputs the disk ED number and 65 
time information in step 851^, performs computation in step 
851 J. performs encryption with the sub secret key in step 
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851r, and issues a password in step 85 The password is 
then transmitted via a network 848 and the POS terminal 846 
to the barcode recording apparatus 845. and the disk 844^ 
with the password recorded thereon is handed to the cus- 
tomer. This disk 844^ can be reproduced as is. 

Next, the operation performed at the rental store will be 
described in detail. First, a ROM disk 844/ locked with 
scrambling is displayed on the store shelf. When the par- 
ticular ROM disk 844/ is specified by a customer, a shop 
clerk holds in his or her hand a circular barcode reader 850 
with a built-in rotary-t>pe optical head 853 generating a 
spiral scanning pattern, and presses it onto the center of the 
disk 800 housed in a transparent case, to read the barcode 
formed by nonreflective portions 815 on the reflective layer 
in the disk 844/. thereby reading the disk ID number. The 
product code may be read either from the barcode of the 
invention formed by the nonreflective portions 815 or from 
the circular barcode prerecorded and pressed by the existing 
recording method on an inner ring portion inside the pit 
recording area of the master disk. These items of informa- 
tion are processed by the POS terminal 846. and the rental 
charge is settled; at the same time, the password correspond- 
ing to the disk ID number is issued in step 85 Ig. as 
previously described. For rental purposes, to limit the num- 
ber of days for viewing, time information, as used in step 
85 ir. is appended to the disk ID number for encryption, and 
the password is thus created. This password is valid for a 
preset number of days, the effect being that in the case of a 
rental disk a rental period of 3 days, for example, can be set 
in the password. 

In step 85 It, the thus issued password for unlocking the 
scramble, the date of rent, the expected data of return, and 
the rental charge of the title are printed on a receipt 849 
which is handed to the customer together with the disk. The 
customer lakes the disk 844/ and receipt 849 home. When, 
in step 851*. the password is input from an input section 
854. such as a numeric keypad, on the information process- 
ing apparatus 676 shown in FIG. 25. the password is 
computed with the disk ID number and is input to a master 
cipher decoder 534 where the encrypted data is decoded into 
plaintext by using a public key. This plaintext is checked in 
a plaintext data checking section 715 to determine whether 
it satisfies a predetermined condition: only when the pass- 
word is correct, program data is descrambled by a sub cipher 
decoder 718. and the video image is output. 

In this case, if the password contains time information, 
date data from a clock section 855 is checked, and descram- 
bling is allowed as long as the date data matches the time 
information. The password and its corresponding ID number 
are stored in a nonvolatile memory 755a in a memory 755. 
Once the password has been entered, the user need not 
reenter It to perform descrambling. In this way. the key on 
a disk can be locked and unlocked by electronic means, 
which oflFcrs an advantage for distribution business. 

The foregoing embodiments have been described refer- 
ring mainly to the disk ID method wherein a disk ID is 
appended to a disk. However, in the case of disks diat do not 
have disk IDs. it becomes necessary to use the drive ID of 
the drive. The following description deals in detail with the 
descrambling. password creation, and checking operations 
when the drive ID alone is used and also when both the drive 
ID and disk ID are used. 

In FIG. 35. when using a password relating to the drive ID 
for descrambling the software, the drive ID 699fl stored in 
a ROM in the reproduction apparatus is transmitted from a 
signal section 851z in FIG. 34 to the password issuing center 
by telephone or via personal computer communication. In 
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the password issuing center, using the drive ID and Che 
software ID in step 85 1^. compulation is performed in step 
8S1j. and the result is encrypted with sub secret key in step 
851/, thereby creating a password in step SSlg. In step 851«. 
the password is transmitted to the communication section 
85z(sic) in the reproduction apparatus including the user's 
personal computer, by telephone or via personal computer 
communication. The user enters the password in step 85U, 
and decryption coraputacion is peifomied using the sub 
public key in step 8Slm. In step 851r. the drive ID is 
compared with the result of the computation, and if they do 
not match, the operation is stopped. If they match, repro- 
duction or operation is performed in step 851/7. 

The advantages and disadvantages of the drive ID method 
and the disk ID method will be described. When the disk ID 
is used, the password is valid only for one particular disk. 
The disk can be run on any drive. This method is therefore 
suitable for movie software and the like. However, in the 
case of business software foe personal computers, if the 
software can be installed on any drive, the software on the 
disk may be illegally copied onto more than one computer. 

That the disk can be run only on one drive is a disadvan- 
tage of the drive ID method in the case of movie software. 
This, however, becomes an advantage in the case of personal 
computer software. For business software that need only be 
installed once, the drive ID method has an advantage in that 
its password-protect unlocking feature prevents the software 
from being illegally installed on a personal computer by 
using other drives than the one designated drive. 

However, the drive ID is written in an EPROM in the 
machine, and can be easily altered. If drives of the same 
drive ID are sold, illegal installation may be made on many 
machines. On the other hand, as already described, it is 
difficult to alter the disk ID of the present invention. In FIG. 
34. if provisions are made to create a password for both disk 35 
ED and drive ID in step 851^ and to check both IDs in step 
851/. the disk ID is prevented from being altered. The 
resulting effect is that if drives of the same drive ID are 
distributed in large quantities, since the disk ID is valid only 
for one particular disk, illegal installation on many machines 40 
is suppressed. 

As described above, the drive ID method and the disk ID 
method have their own advantages and disadvantages, and 
the advantages are different for different applications. It is 
expected that the drive ID method will be used for computer 45 
software that is installed only once, and the disk ID method 
for movie or music software that is reproduced many times. 
This requires that the reproduction apparatus be designed to 
support both methods. Using the flowchart of FIG. 42, we 
will describe an operational procedure that handles both the so 
drive ID and disk ID. When installation is started, first the 
scramble identifier is checked in step 901fl whether it is ON 
or not. If the software is scrambled and the identifier is OFF, 
this means an illegal operation, and the installation stops. 
The installation also stops if the identifier is ON though the 55 
software is not scrambled. As already described, this 
scramble identifier cannot be altered and is therefore effec- 
tive in preventing illegal installation. In step 901c, the 
personal computer is connected to the password issuing 
center via a network. In step 901c/, user ID is entered, and 60 
in step 90le, if the reproduction apparatus has a drive ID, the 
drive ID is transmitted to the password issuing center. After 
confirming payment, the password issuing center performs 
encryption and computation on the drive ID and software ID 
by using a sub secret encryption key. to generate a password. 65 
The persona] computer at the user end performs computation 
to decrypt the password by using a sub public key. and 
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compares it with the machine ID of the personal computer 
or the drive ID of the drive. If they do not match, the 
operation stops: if they match, die installation program is run 
in step 901/1. In the above case, that is. when computing the 
5 password with the drive ID in step 901Jt. a program deoTp- 
lion key may be output to accomplish decryption or 
descrambiing. 

Turning back to step 901e. if there is no drive ID. then it 
is checked in step 90lh whether a disk ID is recorded on the 
disk, and if there is no disk ID. the installau'on stops. If a disk 
ID is recorded, the disk ID and the software ID are trans- 
nutted to the password issuing center. The password issuing 
center communicates with a credit company, and after 
confirming online payment by credit, creates a password in 
step 901/ fi-om the disk ID and software ID by using the sub 
secret key. The personal computer at the user end decrypts 
the password by using the sub public key in step 901w. and 
if the result checks OK. program installation or software 
reproduction is earned out. 

In this way. both the drive ID and disk ID can be handled. 
20 This has the effect of preventing illegal installation while 
allowing legitimate installation of software products having 
various IDs. 

Thus by encrypting the disk physical ID by a one- 
direction encr>'ption encoder, copy protection security can 
25 be enhanced. 

As described above, according to the present 
embodiment, a nonreflective portion is formed on a reflec- 
tive layer in an optical disk consisting of rwo disks laminated 
together, and at least its position information is encrypted 
30 and written on the same optical disk. This makes duplication 
much more difficult as compared to the prior art. Production 
of illegal copies, that is. so-called pirated disks, can thus be 
made virtually impossible. 

As is apparent from the description so far given, the 
present invention has the advantage of achieving a greatly 
improved copy prevention capability' as compared to the 
prior art. 

Furthermore, according to the present invention, a piracy 
check mechanism can be incorporated into the master disk 
by encrypting formatted master disk physical feamre infor- 
mation 876 in combination with public key data and soft- 
ware feature information, as described with reference to 
FIG. 32. etc. This further increases security. 

In FIG. 26. a method was disclosed that provides greater 
network security for online shopping companies. According 
to this method, the online shopping company secondary- 
records the private key for secret conmiunication on all disks 
and distributes it to users, eliminating the need for sending 
the private key to the user by mail and also saving the user 
the trouble to key in the private key of many digits. 
Furthermore, since the user need not enter the private key by 
himself, a large numeric value consisting of 100 or more 
digits can be used as the private key. This greatly improves 
network security. 

In the above embodiment, the marking position informa- 
tion of the invention was written on the same disk, but the 
invention is not limited to the illustrated example. For 
exaniple. the information may be written on a floppy disk as 
a different medium. 

Furthermore, in the above embodiment, examples have 
been described wherein an clUptic function or an RSA 
function is applied to the digital signature or digital 
signature-like technique or encryption technique. However, 
the invention is not limited to the illustrated examples; 
rather, any other encryption technique may be used. 

Moreover, in the above embodiment, the position infor- 
mation was encrypted or was provided with a digital 



